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Reading Assignments and 
Learning Objectives 



The following material is a review of the Operational and Integrated Risk Management 
principles designed to address the learning objectives set forth by the Global Association of Risk 
Professionals. 



Reading Assignments 



38. “Principles for the Sound Management of Operational Risk, ” (Basel Committee on 
Banking Supervision Publication, June 2011). (page 1) 

39- Brian Nocco and Rene Stulz, “Enterprise Risk Management: Theory and Practice,” 
Journal of Applied Corporate Finance 18, No. 4 (2006): 8—20. (page 15) 

Philippa X. Girling, Operational Risk Management: A Complete Guide to a Successful 
Operational Risk Framework (Hoboken: John Wiley & Sons, 2013). 

40. “Internal Loss Data,” Chapter 7 (p a g e 25) 

41. “External Loss Data,” Chapter 8 (page 43) 

42. “Capital Modeling,” Chapter 12 (page 55) 

43. “Operational Risk — Supervisory Guidelines for the Advanced Measurement 
Approaches,” (Basel Committee on Banking Supervision Publication, 

June 2011). (page 69) 

Kevin Dowd, Measuring Market Risk, 2nd Edition (West Sussex, England: John Wiley & 
Sons, 2005). 



44. “Estimating Liquidity Risks,” Chapter 14 (page 86) 

45- “Model Risk,” Chapter 16 (p a g e 100) 

Allan Malz, Financial Risk Management: Models, History, and Institutions (Hoboken, NJ: 
John Wiley &c Sons, 2011). 

46. “Assessing the Quality of Risk Measures,” Chapter 1 1 (page 108) 

47. “Liquidity and Leverage,” Chapter 12 (page 119) 

Bruce Tuckman, Angel Serrat, Fixed Income Securities: Tools for Todays Markets, 

3rd Edition (New York: Wiley, 2011) 

48. “Repurchase Agreements and Financing,” Chapter 12 (page 139) 
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49. “Observations on Developments in Risk Appetite Frameworks and IT Infrastructure,” 

Senior Supervisors Group, December 2010. (page 153) 

Michel Crouhy, Dan Galai and Robert Mark, Risk Management (New York: McGraw- 
Hill, 2001). 

50. “Capital Allocation and Performance Measurement,” Chapter 14 (page 163) 

51. “Range of Practices and Issues in Economic Capital Frameworks,” (Basel Committee on 

Banking Supervision Publication, March 2009)- (page 175) 

52. “Capital Planning at Large Bank Holding Companies: Supervisory Expectations and 

Range of Current Practice,” Board of Governors of the Federal Reserve System, August 
2013. (page 191) 

53. Til Schuermann. “Stress Testing Banks,” April 2012. (page 205) 

54. Darrell Duffie, 2010. “Failure Mechanics of Dealer Evenks" Journal of Economic 

Perspectives 24 : 1 , 51—72. (page 216) 

John Hull, Risk Management and Financial Institutions, 3rd Edition (New York: John 
Wiley & Sons, 2012). 

55. “Basel I, Basel II, and Solvency II,” Chapter 12 (page 227) 

56. “Basel 2.5, Basel III, and Dodd-Frank,” Chapter 13 (page 250) 

57. “Basel II: International Convergence of Capital Measurement and Capital Standards: 

A Revised Framework — Comprehensive Version,” (Basel Committee on Banking 
Supervision Publication, June 2006). (page 267) 

58. “Basel III: A Global Regulatory Framework for More Resilient Banks and Banking 

Systems — Revised Version,” (Basel Committee on Banking Supervision Publication, 
June 2011). (page 295) 

59- “Basel III: The Liquidity Coverage Ratio and Liquidity Risk Monitoring Tools,” (Basel 
Committee on Banking Supervision Publication, January 2013). (page 314) 

60. “Revisions to the Basel II Market Risk Framework — Updated as of 31 December 2010,” 
(Basel Committee on Banking Supervision Publication, February 2011). (page 331) 
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Learning Objectives 

38. Principles for the Sound Management of Operational Risk 

After completing this reading, you should be able to: 

1. Describe the three “lines of defense” in the Basel model for operational risk 
governance, (page 1) 

2. Define and describe the corporate operational risk function (CORF) and compare 
and contrast the structure and responsibilities of the CORF at smaller and larger 
banks, (page 2) 

3. Summarize the fundamental principles of operational risk management as suggested 
by the Basel committee, (page 2) 

4. Evaluate the role of the Board of Directors and senior management in 
implementing an effective operational risk structure per the Basel committee 
recommendations, (page 3) 

5. Describe the elements of a framework for operational risk management, (page 6) 

6. Identify examples of tools which can be used to identify and assess operational risk, 
(page 7) 

7- Describe features of an effective control environment and identify specific controls 
which should be in place to address operational risk, (page 8) 

8. Describe the Basel committees suggestions for managing technology risk and 
outsourcing risk, (page 8) 

39. Enterprise Risk Management: Theory and Practice 

After completing this reading, you should be able to: 

1. Define enterprise risk management (ERM). (page 15) 

2. Explain how implementing ERM practices and policies can create shareholder value 
both at the macro and the micro level, (page 15) 

3. Explain how a company can determine its optimal amount of risk through the use 
of credit rating targets, (page 17) 

4. Describe the development and implementation of an ERM system, (page 17) 

5- Explain the relationship between economic value and accounting performance. 

(page 18) 

6. Describe the role of and issues with correlation in risk aggregation, and describe 
typical properties of a firms market risk, credit risk and operational risk 
distributions, (page 18) 

7- Distinguish between regulatory and economic capital, (page 1 9) 

8. Explain the use of economic capital in the corporate decision making process. 

(page 19) 

40. Internal Loss Data 

After completing this reading, you should be able to: 

1. Summarize the process of collecting internal operational loss data, (page 25) 

2. Describe the seven categories of operational risk events as defined in Basel II and 
identify examples of each, (page 27) 

3. Explain the process a ba n k should use to report operational loss data, including the 
setting of thresholds, determining the loss amount, setting a reference date, and 
describing the causes of a loss event, (page 32) 

4. Describe criteria for allocating operational losses to individual business lines within 
a firm and for the handling of boundary events, (page 36) 
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41. External Loss Data 

After completing this reading, you should be able to: 

1 . Explain the motivations for using external operational loss data and common 
sources of external data, (page 43) 

2. Compare the characteristics of external operational loss data from different sources, 
(page 46) 

3. Describe the challenges which can arise through the use of external data, (page 47) 

4. Describe the Societe Generate operational loss event, explain the lessons learned 
from the event and summarize how this event was classified by external data 
vendors, (page 48) 

42. Capital Modeling 

After completing this reading, you should be able to: 

1 . Compare the basic indicator approach, the standardized approach and the 
alternative standardized approach for calculating the operational risk capital charge 
and calculate the Basel operational risk charge using each approach, (page 55) 

2. Describe the modeling requirements for a bank to use the Advanced Measurement 
Approach (AMA). (page 60) 

3. Describe the loss distribution approach to modeling operational risk capital. 

(page 61) 

4. Explain how frequency and severity distributions of operational losses are obtained, 
including commonly used distributions and suitability guidelines for probability 
distributions, (page 61) 

5. Explain how Monte Carlo simulation can be used to generate additional data points 
to estimate the 99 1 * 1 percentile of an operational loss distribution, (page 63) 

6. Explain the use of scenario analysis and the hybrid approach in modeling 
operational risk capital, (page 63) 

7. Describe the AMA guidelines for the use of insurance in reducing a bank’s 
operational risk capital charge, (page 64) 

43. Operational Risk — Supervisory Guidelines for the Advanced Measurement 

Approaches 

After completing this reading, you should be able to: 

1 . Summarize key guidelines for verification and validation of a bank’s operational 
risk management framework (ORMF) and its operational risk management system 
(ORMS), including the use test and experience, (page 70) 

2. Describe key guidelines for the selection of a bank’s Operational Risk Categories 
(ORCs). (page 78) 

3. Describe commonly used distributions used to model the frequency and severity of 
a bank’s operational loss events, (page 75) 

4. Explain key guidelines for modeling the distribution of individual ORCs, including 
the selection of thresholds, necessary adjustments, and selection of statistical tools 
and probability distributions, (page 79) 

5. Describe techniques used to get an aggregated loss distribution from frequency and 
severity distributions, (page 77) 

6. Explain supervisory guidelines for modeling dependence and correlation effects 
between operational risk factors across different operational risk categories. 

(page 81) 

7. Describe the four required data elements in an AMA model and the guidelines for 
combining data from each element in modeling the capital charge, (page 73) 
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44. Estimating Liquidity Risks 

After completing this reading, you should be able to: 

1 . Define liquidity risk and describe factors that influence liquidity, including the bid- 
ask spread, (page 86) 

2. Define exogenous and endogenous liquidity, (page 87) 

3. Describe the challenges of estimating liquidity-adjusted VaR (LVaR). (page 87) 

4. Describe and calculate LVaR using the constant spread approach and the exogenous 
spread approach, (page 88) 

5- Describe endogenous price approaches to LVaR, their motivation and limitations, 
(page 91) 

6. Describe liquidity at risk (LaR) and compare it to VaR, describe the factors that 
affect future cash flows, and explain challenges in estimating and modeling LaR. 
(page 93) 

7- Explain the role of liquidity in crisis situations and describe approaches to 
estimating crisis liquidity risk, (page 94) 

45. Model Risk 

After completing this reading, you should be able to: 

1. Define model risk; identify and describe sources of model risk, (page 100) 

2. Describe the challenges involved with quantifying model risk, and explain 
quantitative methods for estimating model risk given unknown parameters in a 
financial model, (page 101) 

3. Identify ways risk managers can manage and mitigate model risk, (page 103) 

4. Summarize the role of senior managers in managing model risk, (page 103) 

5. Describe procedures for vetting and reviewing a model, (page 104) 

6. Explain the function of an independent risk oversight (IRO) unit, (page 104) 

46. Assessing the Quality of Risk Measures 

After completing this reading, you should be able to: 

1. Describe ways that errors can be introduced into models, (page 108) 

2. Describe how horizon, computational and modeling decisions can impact VaR 
estimates, (page 109) 

3. Identify challenges related to mapping of risk factors to positions in making VaR 
calculations, (page 110) 

4. Identify reasons for the failure of the long-equity tranche, short- mezzanine credit 
trade in 2005 and describe how such modeling errors could have been avoided, 
(page 111) 

5- Identify two major defects in model assumptions which led to the underestimation 
of systematic risk for residential mortgage backed securities (RMBS) during the 
2008-2009 financial downturn, (page 113) 

47. Liquidity and Leverage 

After completing this reading, you should be able to: 

1 . Define and differentiate between sources of liquidity risk, including transactions 
liquidity risk, balance sheet/ funding liquidity risk and systemic risk, (page 119) 

2. Summarize the process by which a fractional-reserve bank engages in asset liability 
management, (page 120) 

3. Describe issues related to systematic funding liquidity risk with respect to leveraged 
buyouts, merger arbitrage hedge funds, and convertible arbitrage hedge funds. 

(page 121) 
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4. Explain specific liquidity issues faced by money market mutual funds, (page 121) 

5. Describe the economics of the collateral market and explain the mechanics of the 
following transactions using collateral; margin lending, repos, securities lending, 
and total return swaps, (page 122) 

6. Calculate a firms leverage ratio, describe the formula for the leverage effect, and 
explain the relationship between leverage and a firm’s return on equity, (page 124) 

7. Explain the impact on a firm’s leverage and its balance sheet of the following 
transactions: purchasing long equity positions on margin, entering into short sales, 
and trading in derivatives, (page 126) 

8. Identify the main sources of transactions liquidity risk, (page 130) 

9. Calculate the expected transactions cost and the 99 percent spread risk factor for a 
transaction, (page 131) 

10. Calculate the liquidity-adjusted VaR for a position to be liquidated over a number 
of trading days, (page 1 32) 

1 1 . Define characteristics used to measure market liquidity, including tightness, depth 
and resiliency, (page 1 33) 

12. Explain the challenges posed by liquidity constraints on hedge funds during times 
of financial distress, (page 133) 

48. Repurchase Agreements and Financing 

After completing this reading, you should be able to: 

1 . Describe the mechanics of repurchase agreements (repos) and calculate the 
settlement for a repo transaction, (page 139) 

2. Explain common motivations for entering into repos, including their use in cash 
management and liquidity management, (page 140) 

3. Explain how counterparty risk and liquidity risk can arise through the use of repo 
transactions, (page 142) 

4. Assess the role of repo transactions in the collapses of Lehman Brothers and Bear 
Stearns during the 2007-2008 credit crisis, (page 143) 

5. Compare the use of general and special collateral in repo transactions, (page 144) 

6. Describe the characteristics of special spreads and explain the typical behavior of US 
Treasury special spreads over an auction cycle, (page 146) 

7. Calculate the financing value of a bond trading special when used in a repo 
transaction, (page 147) 

49. Observations on Developments in Risk Appetite Frameworks and IT Infrastructure 

After completing this reading, you should be able to: 

1. Describe the concept of a risk appetite framework (RAF), identify the elements of a 
RAF and explain the benefits to a firm of having a well developed RAF. (page 153) 

2. Describe best practices for a firm’s Chief Risk Officer (CRO), Chief Executive 
Officer (CEO) and Board of Directors in the development and implementation of 
an effective RAF. (page 154) 

3. Explain the role of a RAF in managing the risk of individual business lines within a 
firm, (page 155) 

4. Describe the classes of risk metrics to be communicated to managers within the 
firm, (page 156) 

5. Explain the benefits to a firm from having a robust risk data infrastructure, 
and describe key elements of an effective IT risk management policy at a firm. 

(page 156) 
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6. Describe factors which could lead to poor or fragmented IT infrastructure at an 
organization, (page 157) 

7. Explain the challenges and best practices related to data aggregation at an 
organization, (page 158) 

50. Capital Allocation and Performance Measurement 
After completing this reading, you should be able to: 

1. Describe the RAROC (risk-adjusted return on capital) methodology and its 
benefits, (page 163) 

2. Define, compare and contrast economic and regulatory capital, (page 163) 

3. Compute and interpret the RAROC for a loan or loan portfolio, and use RAROC 
to compare business unit performance, (page 1 64) 

4. Explain how capital is attributed to market, credit, and operational risk, (page 165) 
5- Calculate the capital charge for market risk and credit risk, (page 165) 

6. Explain the difficulties encountered in attributing economic capital to operational 
risk, (page 165) 

7. Describe the Loan Equivalent Approach and use it to calculate RAROC capital, 
(page 167) 

8. Explain how the second-generation RAROC approaches improve economic capital 
allocation decisions, (page 168) 

9. Compute the adjusted RAROC for a project to determine its viability, (page 168) 

51. Range of Practices and Issues in Economic Capital Frameworks 
After completing this reading, you should be able to: 

1 . Within the economic capital implementation framework describe the challenges 
that appear in: 

• Defining risk measures 

• Risk aggregation 

• Validation of models 

• Dependency modeling in credit risk 

• Evaluating counterparty credit risk 

• Assessing interest rate risk in the banking book (page 175) 

2. Describe the BIS recommendations that supervisors should consider to make 
effective use of risk measures not designed for regulatory purposes, (page 185) 

3. Describe the constraints imposed and the opportunities offered by economic capital 
within the following areas: 

• Credit portfolio management 

• Risk based pricing 

• Customer profitability analysis 

• Management incentives (page 1 86) 
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32. Capital Planning at Large Bank Holding Companies: Supervisory Expectations and 
Range of Current Practice 

After completing this reading, you should be able to: 

1 . Describe the Federal Reserve’s Capital Plan Rule and explain the seven principles of 
an effective capital adequacy process for bank holding companies (BHCs) subject to 
the Capital Plan Rule, (page 191) 

2. Describe practices which can result in a strong and effective capital adequacy 
process for a BHC in the following areas. 

• Risk identification 

• Internal controls, including model review and valuation 

• Corporate governance 

• Capital policy, including setting of goals and targets and contingency planning 

• Stress testing and stress scenario design 

• Estimating losses, revenues, and expenses, including quantitative and qualitative 
methodologies 

• Assessing the impact of capital adequacy, including RWA and balance sheet 
projections (page 193) 

53. Stress Testing Banks 

After completing this reading, you should be able to: 

1 . Compare and contrast the features and scope of stress tests before and after the 
Supervisory Capital Assessment Program (SCAP). (page 206) 

2. Explain challenges in designing stress test scenarios, including the problem of 
coherence in modeling risk factors, (page 207) 

3. Describe the challenges in modeling losses under adverse market conditions, 
including the mapping of macroeconomic risk factors to specific intermediate risk 
factors, (page 208) 

4. Explain the challenges in modeling a bank’s balance sheet over a stress test horizon 
period, (page 208) 

5. Compare and contrast the 2009 SCAP stress test, the 2011 and 2012 CCAR, and 
the 2011 EBA Irish and EBA European stress tests in their methodologies and key 
findings, (page 209) 

54. The Failure Mechanics of Dealer Banks 

After completing this reading, you should be able to: 

1. Describe the major lines of business in which dealer banks operate and the risk 
factors they face in each line of business, (page 216) 

2. Identify situations that can cause a liquidity crisis at a dealer bank and explain 
responses that can mitigate these risks, (page 220) 

3. Compare a liquidity crisis at a dealer bank to a traditional bank run. (page 222) 

4. Describe policy measures that can alleviate firm-specific and systemic risks related to 
large dealer banks, (page 223) 
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55. Basel I, Basel II, and Solvency II 

After completing this reading, you should be able to: 

1 . Explain the calculation of risk-weighted assets and the capital requirement per the 
original Basel I guidelines, (page 228) 

2. Describe and contrast the major elements — including a description of the risks 
covered — of the two options available for the calculation of market risk: 

• Standardized Measurement Method 

• Internal Models Approach (page 231) 

3. Calculate VaR and the capital charge using the internal models approach, and 
explain the guidelines for backtesting VaR according to the 1996 Basel guideline, 
(page 232) 

4. Describe and contrast the major elements of the three options available for the 
calculation of credit risk: 

• Standardized Approach 

• Foundation IRB Approach 

• Advanced IRB Approach (page 234) 

5- Describe and contrast the major elements of the three options available for the 
calculation of operational risk: basic indicator approach, standardized approach, 
and the advanced measurement approach, (page 240) 

6. Describe the key elements of the three pillars of Basel II: minimum capital 
requirements, supervisory review, and market discipline, (page 240) 

7. Define in the context of Basel II and calculate where appropriate: 

• Probability of default (PD) 

• Loss given default (LGD) 

• Exposure at default (EAD) 

• Worst-case probability of default (page 234) 

8. Differentiate between solvency capital requirements (SCR) and minimum capital 
requirements (MCR) in the Solvency II framework, and describe the repercussions 
to an insurance company for breaching the SCR and MCR. (page 242) 

9. Compare the standardized approach and the internal models approach for 
calculating the SCR in Solvency II. (page 242) 

56. Basel 2.5, Basel III, and Dodd- Frank 

After completing this reading, you should be able to: 

1. Describe and calculate the stressed value-at-risk measure introduced in Basel 2.5, 
and calculate the market risk capital charge, (page 250) 

2. Explain the process of calculating the incremental risk capital charge for positions 
held in a banks trading book, (page 252) 

3. Describe the comprehensive risk measure (CRM) for positions which are sensitive 
to correlations between default risks, (page 252) 

4. Define in the context of Basel III and calculate where appropriate: 

• Tier 1 capital and its components 

• Tier 2 capital and its components 

• Required Tier 1 equity capital, total Tier 1 capital, and total capital (page 254) 

5- Describe the motivations for and calculate the capital conservation buffer and the 

countercyclical buffer introduced in Basel III. (page 255) 

6. Describe and calculate ratios intended to improve the management of liquidity risk, 
including the required leverage ratio, the liquidity coverage ratio, and the net stable 
funding ratio, (page 256) 
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7. Describe the mechanics of contingent convertible bonds (CoCos) and explain the 
motivations for banks to issue them, (page 259) 

8. Explain the major changes to the U.S. financial market regulations as a result of 
Dodd-Frank, (page 260) 

57. Basel II: International Convergence of Capital Measurement and Capital Standards 
After completing this reading, you should be able to: 

1 . Describe the key elements of the three pillars of Basel II: minimum capital 
requirements, supervisory review and market discipline, (page 286) 

2. Describe and contrast the major elements of the three options available for the 
calculation of credit risk: Standardized Approach, Foundation IRB Approach and 
Advanced IRB Approach, (page 276) 

3. Describe and contrast the major elements of the three options available for the 
calculation of operational risk: Basic Indicator Approach, Standardized Approach 
and Advanced Measurement Approach, (page 285) 

4. Describe and contrast the major elements — including a description of the 
risks covered — of the two options available for the calculation of market risk: 
Standardized Measurement Method and Internal Models Approach, (page 283) 

5- Define in the context of Basel II and calculate where appropriate: 

• Capital ratio 

• Capital charge 

• Tier 1 capital and its components 

• Tier 2 capital and its components 

• Tier 3 capital and its components 

• Probability of default (PD) 

• Loss given default (LGD) 

• Exposure at default (EAD) 

• Maturity (M) 

• Stress tests 

• Concentration risk 

• Residual risk (page 274) 

58. Basel III: A Global Regulatory Framework for More Resilient Banks and Banking 
Systems 

After completing this reading, you should be able to: 

1. Describe reasons for the changes implemented through the Basel III framework, 
(page 295) 

2. Describe changes to the regulatory capital framework, including changes to: 

• The measurement, treatment, and calculation of Tier 1 and Tier 2 capital 

• Risk coverage, the use of stress tests, the treatment of counter-party risk with 
credit valuation adjustments, the use of external ratings, and the use of leverage 
ratios (page 297) 

3. Explain changes designed to dampen the pro-cyclical amplification of financial 
shocks and to promote countercyclical buffers, (page 306) 

4. Describe changes intended to improve the handling of systemic risk, (page 307) 

5. Describe changes intended to improve the management of liquidity risk, including 
liquidity coverage ratios, net stable funding ratios, and the use of monitoring 
metrics, (page 308) 
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59. Basel III: The Liquidity Coverage Ratio and Liquidity Risk Monitoring Tools 

After completing this reading, you should be able to: 

1 . Define and describe the minimum liquidity coverage ratio, (page 315) 

2. Describe the characteristics of high quality liquid assets (HQLA) and operational 
requirements for assets to qualify as HQLA. (page 315) 

3. Differentiate between Level 1, Level 2A, and Level 2B assets, and define the 
respective cap for each asset class as a percentage of total HQLA. (page 317) 

4. Define how total net cash outflows are calculated for the minimum liquidity 
coverage ratio, (page 318) 

5- Describe additional metrics to be used by supervisors as monitoring tools when 
assessing the liquidity risk of a bank, (page 322) 

60. Revisions to the Basel II Market Risk Framework 

After completing this reading, you should be able to: 

1. Describe the objectives for revising the Basel II market risk framework, (page 331) 

2. Define the capital charge for specific risk and general market risk, (page 331) 

3. Explain the relationship regulators require between market risk factors used for 
pricing versus those used for calculating value-at-risk, and the risks captured by the 
value-at-risk model, (page 332) 

4. Explain and calculate the stressed value-at-risk measure and the frequency which it 
must be calculated, (page 333) 

5. Explain and calculate the market risk capital requirement, (page 333) 

6. Describe the qualitative disclosures for the incremental risk capital charge. 

(page 334) 

7. Describe the quantitative disclosures for trading portfolios under the internal 
models approach, (page 334) 

8. Describe the regulatory guidance on prudent valuation of illiquid positions. 

(page 334) 
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the learning objectives set forth by GARP®. This topic is also covered in: 



Principles for the Sound 
Management of Operational Risk 



Topic 38 



Exam Focus 

This is a descriptive topic that addresses the principles of sound operational risk management 
as proposed by the Basel Committee on Banking Supervision. The committee describes a 
three lines of defense approach, which includes business line management, independent 
operational risk management, and independent reviews. The committee suggests that a 
bank should have a corporate operational risk function (CORF) that is commensurate 
with the size and complexity of the banking organization. For the exam, understand the 1 1 
principles of operational risk management as outlined by the Basel Committee. Know the 
specific responsibilities of the board of directors and senior managers as they relate to the 1 1 
principles of operational risk management. Be able to explain the critical components of the 
banks operational risk management framework documentation, and know the features of 
an effective control environment. Lastly, understand the committee s recommendations for 
managing technology and outsourcing. 



Operational Risk Governance 



LO 38 . 1 : Describe the three “lines of defense” in the Basel model for operational 
risk governance. 



The Basel Committee on Banking Supervision defines operational risk as “the risk of loss 
resulting from inadequate or failed internal processes, people and systems or from external 
events.” The committee states that the definition excludes strategic and reputational risks 
but includes legal risks. Operational risk is inherent in banking activities. Risks range from 
those arising from national disasters, such as hurricanes, to the risk of fraud. The committee 
intends to improve operational risk management throughout the banking system. 

Sound operational risk management practices cover governance, the risk management 
environment, and the role of disclosure. Operational risk management must be fully 
integrated into the overall risk management processes of the bank. 

The three common “lines of defense” employed by firms to control operational risks are: 

1 . Business line management. Business line management is the first line of defense. 

Banks now, more than ever, have multiple lines of business, all with varying degrees of 
operational risk. Risks must be identified and managed within the various products, 
activities, and processes of the bank. 
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2. An independent operational risk management function. This is the second line of 
defense and is discussed in the next LO. 

3. Independent reviews of operational risks and risk management. The review may 
be conducted internally with personnel independent of the process under review or 
externally. Independent review will be discussed in detail in Topic 43. 

Corporate Operational Risk Function (CORF) 



LO 38.2: Define and describe the corporate operational risk function (CORF) and 
compare and contrast the structure and responsibilities of the CORF at smaller and 
larger banks. 



The ba nk s specific business lines monitor, measure, report, and manage operational 
and other risks. The corporate operational risk function (CORF), also known as the 
corporate operational risk management function, is a functionally independent group that 
complements the business lines’ risk management operations. The CORF is responsible 
for designing, implementing, and maintaining the bank’s operational risk framework. 
Responsibilities of the CORF may include: 

• Measurement of operational risks. 

• Establishing reporting processes for operational risks. 

• Establishing risk committees to measure and monitor operational risks. 

• Reporting operational risk issues to the board of directors. 

In general, the CORF must assess and challenge each business lines contributions to risk 
measurement, management, and reporting processes. 

Larger, more complex banking institutions will typically have a more formalized approach 
to the implementation of the lines of defense against operational risks, including the 
implementation of the CORF. For example, a large bank may have a fully staffed group 
skilled specifically in operational risk management, while a smaller bank may simply fold 
operational risk management into the broader risk management function of the bank. 



Principles of Operational Risk Management 



LO 38.3: Summarize the fundamental principles of operational risk management 
as suggested by the Basel committee. 



Operational risks must be proactively managed by a banks board of directors and senior 
managers as well as its business line managers and employees. The 1 1 fundamental 
principles of operational risk management suggested by the Basel Committee are: 

1 . The maintenance of a strong risk management culture led by the bank’s board of 
directors and senior managers. This means that both individual and corporate values 
and attitudes should support the bank’s commitment to managing operational risks. 

2. The operational risk framework (referred to as the “Framework” in this topic) must 
be developed and fully integrated into the overall risk management processes of the 
bank. 
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3. The board should approve and periodically review the Framework. The board should 
also oversee senior management to ensure that appropriate risk management decisions 
are implemented at all levels of the firm. 

4. The board must identify the types and levels of operational risks the bank is willing to 
assume as well as approve risk appetite and risk tolerance statements. 

5. Consistent with the banks risk appetite and risk tolerance, senior management must 
develop a well-defined governance structure within the bank. The structure must 
be implemented and maintained throughout the banks various lines of business, its 
processes, and its systems. The board of directors should approve this governance 
structure. 

6. Senior management must understand the risks, and the incentives related to those 
risks, inherent in the banks business lines and processes. These operational risks must 
be identified and assessed by managers. 

7. New lines of business, products, processes, and systems should require an approval 
process that assesses the potential operational risks. Senior management must make 
certain this approval process is in place. 

8. A process for monitoring operational risks and material exposures to losses should be 
put in place by senior management and supported by senior management, the board of 
directors and business line employees. 

9- Banks must put strong internal controls, risk mitigation, and risk transfer strategies in 
place to manage operational risks. 

10. Banks must have plans in place to survive in the event of a major business disruption. 

Business operations must be resilient. 

1 1 . Banks should make disclosures that are clear enough that outside stakeholders can 
assess the bank’s approach to operational risk management. 

The Role of the Board and Senior Management 



LO 38.4: Evaluate the role of the Board of Directors and senior management 
in implementing an effective operational risk structure per the Basel committee 
recommendations. 



The attitudes and expectations of the board of directors and senior management are critical 
to an effective operational risk management program. 

With respect to Principle 1, the board of directors and/or senior management should: 

• Provide a sound foundation for a strong risk management culture within the bank. 

A strong risk management culture will generally mitigate the likelihood of damaging 
operational risk events. 
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* Establish a code of conduct (or ethics policy) for all employees that outlines 
expectations for ethical behavior. The board of directors should support senior managers 
in producing a code of conduct. Risk management activities should reinforce the code 
of conduct. The code should be reflected in training and compensation as well as risk 
management. There should be a balance between risks and rewards. Compensation 
should be aligned not just with performance, but also with the bank’s risk appetite, 
strategic direction, financial goals, and overall soundness. 

* Provide risk training throughout all levels of the bank. Senior management should 
ensure training reflects the responsibilities of the person being trained. 

With respect to Principle 2, the board of directors and/or senior management should: 

* Thoroughly understand both the nature and complexity of the risks inherent in the 
products, lines of business, processes, and systems in the bank. Operational risks are 
inherent in all aspects of the ba nk . 

* Ensure that the Framework is fully integrated in the ba nk s overall risk management 
plan across all levels of the firm (i.e., business lines, new business lines, products, 
processes, and/or systems). Risk assessment should be a part of the business strategy of 
the bank. 

With respect to Principle 3, the board of directors and/or senior management should: 

* Establish a culture and processes that help bank managers and employees understand 
and manage operational risks. The board must develop comprehensive and dynamic 
oversight and control mechanisms that are integrated into risk management processes 
across the bank. 

* Regularly review the Framework. 

* Provide senior ma na gement with guidance regarding operational risk management and 
approve policies developed by senior management aimed at managing operational risk. 

* Ensure that the Framework is subject to independent review. 

* Ensure that management is following best practices in the field with respect to 
operational risk identification and management. 

* Establish clear lines of management responsibility and establish strong internal 
controls. 

With respect to Principle 4, the board of directors and/or senior management should: 

* Consider all relevant risks when approving the banks risk appetite and tolerance 
statements. The board must also consider the banks strategic direction. The board 
should approve risk limits and thresholds. 

* Periodically review the risk appetite and tolerance statements. The review should 
specifically focus on: 

♦ Changes in the market and external environment. 

♦ Changes in business or activity volume. 

♦ Effectiveness of risk management strategies. 

♦ The quality of the control environment. 

♦ The nature of, frequency of, and volume of breaches to risk limits. 

With respect to Principle 5, the board of directors and/or senior management should: 

* Establish systems to report and track operational risks and maintain an effective 
mechanism for resolving problems. Banks should demonstrate the effective use of the 
three lines of defense to manage operational risk, as outlined by the Basel Committee. 
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• Translate the Framework approved by the board into specific policies and procedures 
used to manage risk. Senior managers should clearly assign areas of responsibility and 
should ensure a proper management oversight system to monitor risks inherent in the 
business unit. 

• Ensure that operational risk managers communicate clearly with personnel responsible 
for market, credit, liquidity, interest rate, and other risks and with those procuring 
outside services, such as insurance or outsourcing. 

• Ensure that CORF managers should have sufficient stature in the bank, commensurate 
with market, credit, liquidity, interest rate, and other risk managers. 

• Ensure that the staff is well trained in operational risk management. Risk managers 
should have independent authority relative to the operations they oversee. 

• Develop a governance structure of the bank that is commensurate with the size and 
complexity of the firm. Regarding the governance structure, the bank should consider: 

♦ Committee structure', for large, complex banks, a board-created firm level risk 
committee should oversee all risks. The management-level operational risk 
committee would report to the enterprise level risk committee. 

♦ Committee composition', committee members should have business experience, 
financial experience, and independent risk management experience. Independent, 
non-executive board members may also be included. 

♦ Committee operation', committees should meet frequently enough to be productive 
and effective. The committee should keep complete records of committee meetings. 

With respect to Principle 6, the board of directors and/or senior management should: 

• Consider both internal and external factors to identify and assess operational risk. 

Examples of tools that may be used to identify and assess risk are described in LO 38.6. 

With respect to Principle 7, the board of directors and/or senior management should: 

• Maintain a rigorous approval process for new products and processes. The bank 
should make sure that risk management operations are in place from the inception 
of new activities because operational risks typically increase when a bank engages in 
new activities, new product lines, enters unfamiliar markets, implements new business 
processes, puts into operation new technology, and/or engages in activities that are 
geographically distant from the main office. 

• Thoroughly review new activities and product lines, reviewing inherent risks, potential 
changes in the banks risk appetite or risk limits, necessary controls required to mitigate 
risks, residual risks, and the procedures used to monitor and manage operational risks. 

With respect to Principle 8, the board of directors and/or senior management should: 

• Continuously improve the operational risk reporting. Reports should be manageable in 
scope but comprehensive and accurate in nature. 

• Ensure that operational risk reports are timely. Banks should have sufficient resources to 
produce reports during both stressed and normal market conditions. Reports should be 
provided to the board and senior management. 

• Ensure that operational risk reports include: 

♦ Breaches of the banks risk appetite and tolerance statement. 

♦ Breaches of the banks thresholds and risk limits. 

♦ Details of recent operational risk events and/or losses. 

♦ External events that may impact the bank’s operational risk capital. 

♦ Both internal and external factors that may affect operational risk. 
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With respect to Principle 9, the board of directors and/or senior management should have 
a sound internal control system as described in LO 38.7 (an effective control environment) 
and LO 38.8 (managing technology and outsourcing risks). 

Banks may need to transfer risk (e.g., via insurance contracts) if it cannot be adequately 
managed within the bank. However, sound risk management controls must be in place and 
thus risk transfer should be seen as a complement to, rather than a replacement for, risk 
management controls. New risks, such as counterparty risks, may be introduced when the 
bank transfers risk. These additional risks must also be identified and managed. 

With respect to Principle 10, the board of directors and/or senior management should: 

* Establish continuity plans to handle unforeseen disruptive events (e.g., disruptions in 
technology, damaged facilities, pandemic illnesses that affect personnel, and so on). Plans 
should include impact analysis and plans for recovery. Continuity plans should identify 
key facilities, people, and processes necessary for the business to operate. The plan must 
also identify external dependencies such as utilities, vendors, and other third party 
providers. 

* Periodically review continuity plans. Personnel must be trained to handle emergencies 
and, where possible, the bank should perform disaster recovery and continuity tests. 

With respect to Principle 1 1, the board of directors and/or senior management should: 

* Write disclosures such that stakeholders can assess the banks operational risk 
management strategies. 

* Disclosures should be consistent with board of directors and senior management risk 
management procedures. The disclosure policy should be established by the board of 
directors and senior management and approved by the board of directors. The bank 
should also be able to verify disclosures. 

Operational Risk Management Framework 



LO 38.5: Describe the elements of a framework for operational risk management. 



The operational risk management framework (i.e., the Framework) must define, describe, 
and classify operational risk and operational loss exposure. The Framework helps the board 
and managers understand the nature and complexities of operational risks inherent in the 
banks products and services. The components of the Framework should be fully integrated 
into the bank’s overall risk management plan. The Framework must be documented in the 
board of directors’ approved policies. 

Framework documentation, which is overseen by the board of directors and senior 
management, should: 

• Describe reporting lines and accountabilities within the governance structure used to 
manage operational risks. 

• Describe risk assessment tools. 

• Describe the banks risk appetite and tolerance. 

• Describe risk limits. 

• Describe the approved risk mitigation strategies (and instruments). 
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• With respect to inherent and residual risk exposures, describe the banks methods for 
establishing risk limits and monitoring risk limits. 

• Establish risk reporting processes and management information systems. 

• Establish a common language or taxonomy of operational risk terms to create 
consistency of risk identification and management. 

• Establish a process for independent review of operational risk. 

• Require review of established policies and procedures. 

Tools for Identifying and Assessing Operational Risk 



LO 38 . 6 : Identify examples of tools which can be used to identify and assess 
operational risk. 



Tools that may be used to identify and assess operational risk include: 

• Business process mappings, which do exactly that, map the banks business processes. 
Maps can reveal risks, interdependencies among risks, and weaknesses in risk 
management systems. 

• Risk and performance indicators are measures that help managers understand the bank’s 
risk exposure. There are Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs). 
KRIs are measures of drivers of risk and exposures to risk. KPIs provide insight into 
operational processes and weaknesses. Escalation triggers are often paired with KRIs and 
KPIs to warn when risk is approaching or exceeding risk thresholds. 

• Scenario analysis is a subjective process where business line managers and risk managers 
identify potential risk events and then assess potential outcomes of those risks. 

• Measurement involves the use of outputs of risk assessment tools as inputs for 
operational risk exposure models. The bank can then use the models to allocate 
economic capital to various business units based on return and risk. 

• Audit findings identify weaknesses but may also provide insights into inherent 
operational risks. 

• Analysis of internal operational loss data. Analysis can provide insight into the causes of 
large losses. Data may also reveal if problems are isolated or systemic. 

• Analysis of external operational loss data including gross loss amounts, dates, amount of 
recoveries and losses at other firms. 

• Risk assessments, or risk self assessments (RSAs), address potential threats. Assessments 
consider the banks processes and possible defenses relative to the firm’s threats and 
vulnerabilities. Risk Control Self Assessments (RCSA) evaluate risks before risk controls are 
considered (i.e., inherent risks). Scorecards translate RCSA output into metrics that help 
the bank better understand the control environment. 

• Comparative analysis combines all described risk analysis tools into a comprehensive 
picture of the bank’s operational risk profile. For example, the bank might combine audit 
findings with internal operational loss data to better understand the weaknesses of the 
operational risk framework. 
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Features of an Effective Control Environment 



LO 38.7: Describe features of an effective control environment and identify specific 
controls which should be in place to address operational risk. 



An effective control environment must include the following five components: 

1 . A control environment. 

2. Risk assessment. 

3. Control activities. 

4. Information and communication. 

5. Monitoring activities. 

Senior managers should conduct top-level reviews of progress toward stated risk objectives, 
verify compliance of standards and controls, review instances of non-compliance, evaluate 
the approval system to ensure accountability, and track reports of exceptions to risk limits 
and management overrides and deviations from risk policies and controls. Managers should 
also ensure that duties are segregated and conflicts of interest are identified and minimized. 

Specific controls that should be in place in the organization to address operational risk 
include: 

• Clearly established lines of authority and approval processes for everything from new 
products to risk limits. 

• Careful monitoring of risk thresholds and limits. 

• Safeguards to limit access to and protect bank assets and records. 

• An appropriately sized staff to manage risks. 

• An appropriately trained staff to manage risks. 

• A system to monitor returns and identify returns that are out of line with expectations 
(e.g., a product that is generating high returns but is supposed to be low risk may 
indicate that the performance is a result of a breach of internal controls). 

• Confirmation and reconciliation of bank transactions and accounts. 

• A vacation policy that requires officers and employees to be absent for a period not less 
than two consecutive weeks. 

Managing Technology and Outsourcing Risk 



LO 38.8: Describe the Basel committee s suggestions for managing technology risk 
and outsourcing risk. 



Technology can be used to mitigate operational risks. For example, automated procedures 
are generally less prone to error than manual procedures. However, technology introduces 
its own risks. The Basel Committee recommends an integrated approach to identifying, 
measuring, monitoring, and managing technology risks. 
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Technology risk management tools are similar to those suggested for operational risk 
management and include: 

• Governance and oversight controls. 

• Policies and procedures in place to identify and assess technology risks. 

• Written risk appetite and tolerance statements. 

• Implement a risk control environment. 

• Establish risk transfer strategies to mitigate technology risks. 

• Monitor technology risks and violations of thresholds and risk limits. 

« Create a sound technology infrastructure (i.e., the hardware and software components, 
data and operating environments). 

Outsourcing involves the use of third parties to perform activities or functions for the 
firm. Outsourcing may reduce costs, provide expertise, expand bank offerings, and/or 
improve bank services. The board of directors and senior management must understand the 
operational risks that are introduced as a result of outsourcing. Outsourcing policies should 
include: 

• Processes and procedures for determining which activities can be outsourced and how 
the activities will be outsourced. 

• Processes for selecting service providers (e.g., due diligence). 

• Structuring the outsourcing agreement to describe termination rights, ownership of data, 
and confidentiality requirements. 

• Monitor risks of the arrangement including the financial health of the service provider. 

• Implement a risk control environment and assess the control environment at the service 
provider. 

• Develop contingency plans. 

• Clearly define responsibilities of the bank and the service provider. 
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Key Concepts 



LO 38.1 

The Basel Committee on Banking Supervision defines operational risk as, “the risk of loss 
resulting from inadequate or failed internal processes, people, and systems or from external 
events.” 

The Basel Committee recognizes three common lines of defense used to control operational 
risks. These lines of defense are: (1) business line management, (2) independent operational 
risk management function, and (3) independent reviews of operational risks and risk 
management. 



LO 38.2 

The corporate operational risk function (CORF) is a functionally independent group that 
complements the business lines’ risk management operations. The CORF is responsible for 
designing, implementing, and maintaining the bank’s operational risk framework. 



LO 38.3 

The 1 1 fundamental principles of operational risk management suggested by the Basel 

Committee are: 

1 . The maintenance of a strong risk management culture led by the bank’s board of 
directors and senior management. 

2. The operational risk framework (i.e., the “Framework”) must be developed and fully 
integrated in the overall risk management processes of the bank. 

3. The board should approve and periodically review the Framework. The board should 
also oversee senior management to ensure that appropriate risk management decisions 
are implemented at all levels of the firm. 

4. The board must identify the types and levels of operational risks the bank is willing to 
assume as well as approve risk appetite and risk tolerance statements. 

5. Consistent with the ba n ks risk appetite and risk tolerance, senior management must 
develop a well-defined governance structure within the bank. 

6. Operational risks must be identified and assessed by managers. Senior management 
must understand the risks, and the incentives related to those risks, inherent in the 
banks business lines and processes. 

7. New lines of business, products, processes, and systems should require an approval 
process that assesses the potential operational risks. 
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8. A process for monitoring operational risks and material exposures to losses should be 
put in place by senior management and supported by senior management, the board of 
directors, and business line employees. 

9. Banks must put strong internal controls and risk mitigation and risk transfer strategies 
in place to manage operational risks. 

10. Banks must have plans in place to survive in the event of a major business disruption. 

Business operations must be resilient. 

1 1 . Ba n ks should make disclosures that are clear enough that outside stakeholders can assess 
the banks approach to operational risk management. 



LO 38.4 

The board of directors and senior management must be engaged with operational risk 
assessment related to all 11 of the funda m ental principles of operational risk management. 



LO 38.5 

The operational risk management framework must define, describe, and classify operational 
risk and operational loss exposure. The Framework must be documented in the board of 
directors approved policies. 



LO 38.6 

There are several tools that may be used to identify and assess operational risk. The tools 
include business process mappings, risk and performance indicators, scenario analysis, 
using risk assessment outputs as inputs for operational risk exposure models, audit findings, 
analyzing internal and external operational loss data, risk assessments, and comparative 
analysis. 



LO 38.7 

An effective control environment should include the following five components: 

(1) a control environment, (2) risk assessment, (3) control activities, (4) information 
and communication, and (5) monitoring activities. 



LO 38.8 

Technology can be used to mitigate operational risks but it introduces its own risks. 

The Basel Committee recommends an integrated approach to identifying, measuring, 
monitoring, and managing technology risks. Technology risk management tools are similar 
to those suggested for operational risk management. 

Outsourcing involves the use of third parties to perform activities or functions for the 
firm. Outsourcing may reduce costs, provide expertise, expand bank offerings, and/ or 
improve bank services. The board of directors and senior management must understand the 
operational risks that are introduced as a result of outsourcing. 
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Concept Checkers 



1 . Griffin Riehl is a risk manager at Bluegrass Bank and Trust, a small, independent 
commercial bank in Kentucky. Riehl has recently read the Basel Committee on 
Banking Supervisions recommendations for sound operational risk management and 
would like to put several controls in place. He would like to start with the three lines 
of defense suggested by the committee. Which of the following is not one of the 
three common “lines of defense” suggested by the Basel Committee for operational 
risk governance? 

A. Business line management. 

B. Board of directors and senior management risk training programs. 

C. Creating an independent operational risk management function in the bank. 

D. Conducting independent reviews of operational risks and risk management 
operations. 

2. Garrett Bridgewater, a trader at a large commercial bank, has continued to increase 
his bonus each year by producing more and more profit for the bank. In order to 
increase profits, Bridgewater has been forced to increase the riskiness of his positions, 
despite the written risk appetite and tolerance statements provided to all employees 
of the bank. The bank seems happy with his performance so Bridgewater takes 

that as a sign of approval of his methods for improving profitability. Which of the 
following pairs of the 1 1 fundamental principles of risk management has the bank 
most clearly violated in this situation? 

A. Principle 1 (a strong risk management culture) and Principle 1 1 (the bank 
should make clear disclosures of operational risks to stakeholders). 

B. Principle 2 (develop an integrated approach to operational risk management) 
and Principle 7 (establish a rigorous approval process for new lines of business). 

C. Principle 3 (approve and review the operational risk framework) and Principle 4 
(develop risk appetite and tolerance statements). 

D. Principle 5 (develop a well-defined governance structure) and Principle 6 
(understand the risk and incentives related to risk inherent in the bank’s business 
lines and processes). 

3. Gary Hampton is providing descriptions of the operational risk management 
assessment tools, reporting lines, and accountabilities to the board of directors. 
Hampton is most likely working on: 

A. Framework documentation. 

B. A corporate operational risk function (CORF) handbook of operations. 

C. An outline of the fundamental principles of operational risk management. 

D. An open group operational framework diagram. 

4. George Mathis works in risk analysis and management at a large commercial bank. 
He uses several tools to identify and assess operational risk. He has asked several 
business line managers to identify some risk events that would disrupt business. Each 
manager has also provided their thoughts on what would happen given worst case 
operational failures. The risk assessment tool Mathis is most likely using in this case 
is (are): 

A. risk indicators. 

B. comparative analysis. 

C. scenario analysis. 

D. business process mappings. 
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Concept Checker Answers 



1 . B The three common “lines of defense” suggested by the Basel Committee on Banking 

Supervision and employed by firms to control operational risks are: (1) business 
line management, (2) an independent operational risk management function, and 

(3) independent reviews of operational risks and risk management. 

2. D Based on the choices provided, the best match for the scenario is a violation of Principles 5 

and 6. It is clear that the bank has not considered the incentives that are related to risk taking 
in the bank. Bridgewater has been given the risk appetite and tolerance statements but senior 
managers keep rewarding Bridgewater for high returns and seem to be ignoring the fact that 
they are the result of higher risks. Thus, there are incentives linked to increasing risk. The 
governance structure may or may not be well defined, but regardless, is not being adhered to. 

3. A The operational risk management framework (i.e., the Framework) must define, describe, 

and classify operational risk and operational loss exposure. Hampton is likely working on 
Framework documentation. Framework documentation is overseen by the board of directors 
and senior management. 

4. C Mathis is asking for managers to identify potential risk events, which he will use to assess 

potential outcomes of these risks. This is an example of scenario analysis. Scenario analysis 
is a subjective process where business line managers and risk managers identify potential risk 
events and then assess potential outcomes of those risks. 

5. C A functionally independent corporate operational risk function is desirable in a bank but is 

not necessary for an effective control environment. This is especially true for a small bank, 
which might roll all risk management activities into one risk management group (i.e., not 
segregated by type of risk). An effective control environment should include the following 
five components: (1) a control environment, (2) risk assessment, (3) control activities, 

(4) information and communication, and (5) monitoring activities. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Enterprise Risk Management: 
Theory and Practice 



Topic 39 



Exam Focus 

Enterprise risk management (ERM) is the process of managing all of a corporations risks 
within an integrated, framework. This topic describes how ERM can be implemented in a 
way that enables a company to manage its total risk- return tradeoff in order to better carry 
out its strategic plan, gain competitive advantage, and create shareholder value. Key issues 
include why it may be optimal to hedge diversifiable risk and how to differentiate between 
core risks the firm should retain and noncore risks the firm should layoff. Also discussed is 
the determination of the optimal amount of corporate risk and the importance of ensuring 
that managers at all levels take proper account of the risk- return tradeoff. For the exam, 
understand the framework for developing and implementing ERM. 



LO 39.1: Define enterprise risk management (ERM). 



A business can manage its risks separately, one at a time, or all together in a cohesive 
framework. Enterprise risk management (ERM) is the process of managing all of a 
corporation’s risks within an integrated framework. 

The benefit of ERM is that a comprehensive program for managing risk allows the business 
to achieve its ideal balance of risk and return. 



Creating Value With ERM 



LO 39.2: Explain how implementing ERM practices and policies can create 
shareholder value both at the macro and the micro level. 



Macro Level 

At the macro level, ERM allows management to optimize the firm’s risk/return tradeoff. 
This optimization assures access to the capital needed to execute the firm’s strategic plan. 

The perfect markets view of finance implies that a company’s cost of capital is unrelated to 
its diversifiable risk. Rather, the cost of capital is determined by the firm’s systematic risk 
(also referred to as nondiversifiable, market, or beta risk). According to this view, efforts to 
hedge diversifiable risk provide no benefit to shareholders, who can eliminate this risk by 
diversifying their portfolios. 
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However, reducing diversifiable risk can be beneficial when markets are imperfect. Suppose 
a firm experiences a large and unexpected drop in its operating cash flow and does not have 
funds sufficient to fund valuable investment opportunities. In perfect markets, the firm 
would be able to raise funds on fair terms to fund all of its value-creating projects. When 
markets are not perfect (i.e., investors’ information about project values is incomplete), 
the firm may not be able to raise the needed funds on fair terms. This can lead to the 
“underinvestment problem,” where the company passes up valuable strategic investments 
rather than raise equity on onerous terms. The inability to fund strategic investments on 
a timely basis can result in a permanent reduction in shareholder value, even if the cash 
shortfall is temporary. By hedging diversifiable risks, the company reduces the likelihood 
of facing the underinvestment problem. Thus, the primary function of corporate risk 
management is to protect the company’s strategic plan by ensuring timely investment. 

The ability to carry out the strategic plan in a timely manner confers an advantage over 
competitors who are unable to do so. 

Micro Level 

In order for ERM to achieve the obj ective of optimizing the risk/return tradeoff, each 
project must be evaluated not only for the inherent risk of the project but also for the effect 
on the overall risk of the firm. Thus, ERM requires that managers throughout the firm be 
aware of the ERM program. This decentralization of evaluating the risk/return tradeoff has 
two components: 

• Any managers evaluating new projects must consider the risks of the project in the 
context of how the project will affect the firms total risk. 

• Business units must be evaluated on how each unit contributes to the total risk of the 
firm. This gives the individual managers an incentive to monitor the effect of individual 
projects on overall firm risk. 

There are three reasons why decentralizing the risk-return tradeoff in a company is 
important: 

1 . Transformation of the risk management culture: A consistent, systematic assessment of 
risks by all business units ensures that managers consider the impact of all important 
risks. 

2. Every risk is owned: Because performance evaluations are based on risk, managers have 
an incentive to consider important risks in their decision making. 

3. Risk assessment by those closest to the risk: Managers in the individual business units have 
the knowledge and expertise needed to assess and manage the risks of the business unit. 
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LO 39.3: Explain how a company can determine its optimal amount of risk 
through the use of credit rating targets. 

LO 39.4: Describe the development and implementation of an ERM system. 



In developing an ERM, management should follow this framework: 

• Determine the firms acceptable level of risk. The critical component of this 
determination is selecting the probability of financial distress that maximizes the value 
of the firm. Financial distress in this context means any time the firm must forego 
projects with positive net present values, due to inadequate resources. The likelihood of 
financial distress could be minimized by investing all funds into U.S. Treasury securities, 
but this should not be the firms objective. The objective should be maxi mi zing firm 
value by selecting an appropriate probability of distress. For many firms, the proxy used 
for measuring the probability of distress is the firm’s credit rating assigned by external 
agencies. Thus, the firm may determine that the objective under ERM is to avoid a 
minimum credit rating below BBB. If the firm is currently rated AA, for example, the 
likelihood of falling below BBB can be estimated by average data supplied by the rating 
agency. 

• Based on the firms target debt rating, estimate the capital (i.e., buffer) required to 
support the current level of risk in the firm’s operations. In other words, how much 
capital does the firm need to have (on hand or available externally) to ensure that it 
can avoid financial distress. A company with liquid assets sufficient to fund all of its 
positive NPV projects would not be exposed to the underinvestment problem when it 
encountered cash flow deficits. Thus, risk management can be viewed as a substitute for 
investing equity capital in liquid assets. Keeping a large amount of equity in the form of 
liquid assets is costly. Instead of maintaining a large liquid asset buffer, a company can 
institute a risk management program to ensure (at some level of statistical significance) 
that its operating cash flow will not fell below the level needed to fund valuable projects. 
That is, the firm can take actions to limit the probability of financial distress to a level 
that maximizes firm value. The goal of ERM is to optimize (not eliminate) total risk by 
trading off the expected returns from taking risks with the expected costs of financial 
distress. 

• Determine the ideal mix of capital and risk that will achieve the appropriate debt 
rating. At this level of capital, the firm will be indifferent between increasing capital and 
decreasing risk. 

• Decentralize the risk/ capital tradeoff by giving individual managers the information 
and the incentive they need to make decisions appropriate to maintain the risk/ capital 
tradeoff. 

The implementation steps of ERM are as follows: 

Step 1: Identify the risks of the firm. For many banks, risks are classified as falling into 

one of three categories: market, credit, or operational. Other financial institutions 
broaden the list to include asset, liability, liquidity, and strategic risks. Identification 
of risks should be performed both top-down (by senior management) and bottom- 
up (by individual managers of business units or other functional areas). 
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Step 2: Develop a consistent method to evaluate the firm’s exposure to the risks identified 
above. If the methodology is not consistent, the ERM system will fail because 
capital will be mis-allocated across business units. 

Economic V\lue vs. Accounting Y\lue 



LO 39.5: Explain the relationship between economic value and accounting 
performance. 



Credit ratings are typically based on accounting data, combined with some level of 
subjective assessment by analysts. Economic value, as determined by management, may very 
well be a more accurate reflection of the true value of the firm. 

In determining whether accounting value or economic value is more relevant, the firm must 
consider its objective. If the objective is to manage the probability of default, the question 
of how default is determined becomes important. If default is determined by failure to meet 
certain accounting measures (e.g., debt ratio, interest coverage), then accounting measures 
will be a critical component of meeting the objectives. 

If the objective is to manage the present value of future cash flows, then economic measures 
may be more appropriate than accounting measurements that do not accurately capture 
economic reality. Management must consider that managing economic value may lead to 
more volatile accounting earnings, which may ultimately affect economic value as well. 



Risk Aggregation 



LO 39.6: Describe the role of and issues with correlation in risk aggregation, and 
describe typical properties of a firm’s market risk, credit risk and operational risk 
distributions. 



Firms that use value at risk (VaR) to assess potential loss amounts will ultimately have three 
different VaR measures to manage. Market risk, credit risk, and operational risk will each 
produce their own VaR measures. The trick to accurately measuring and managing firm- 
wide risk, and in turn firm-wide VaR, is to understand how these VaR measures interact. 
Market risks will typically follow a normal distribution; however, the distributions for credit 
risks and operational risks are usually asymmetric in shape, due to the fat-tail nature of these 
risks. 

Due to diversification effects of aggregating market, credit, and operational risk, firm-wide 
VaR will be less than the sum of the VaRs from each risk category. This suggests that the 
correlation among risks is some value less than one. It can be difficult to determine this 
correlation amount, so firms typically use average correlation values within their respective 
industry. However, firms should recognize that correlations can be influenced by firm- 
specific actions as well as external events such as a financial crisis. 
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LO 39.7: Distinguish between regulatory and economic capital. 



Regulatory capital requirements may differ significantly from the capital required to achieve 
or maintain a given credit rating (economic capital). If regulatory requirements are less than 
economic capital requirements, then the firm will meet the regulatory requirements as part 
of its ERM objectives, and there will be no effect on the firms activities. 

However, if regulatory capital requirements are greater than economic capital requirements, 
then the firm will have excess capital on hand. If competitors are subject to the same 
requirements, this excess capital will amount to a regulatory tax. If competing firms are not 
subject to the excess capital requirement, they will have a competitive advantage. 

Because regulatory capital requirements are typically based on accounting capital, rather 
than economic capital, a firm with economic values in excess of accounting values may be 
penalized, and may have to maintain higher amounts in liquid assets to cover the shortfall. 



LO 39.8: Explain the use of economic capital in the corporate decision making 
process. 



The economic capital of the firm must be put to productive use. If a firm accumulates 
excess economic capital that is not employed productively, investors will reduce the value of 
the firm. This reduction will be consistent with the failure of existing management to earn 
the cost of capital on the excess amount. 

As a firm takes on new projects, the probability of financial distress increases. One way to 
offset this increased risk is to raise enough additional capital to bring the risk of financial 
distress back to the level that existed prior to the new project. 

For example, assume that a firm has a value at risk (VaR) measure of $1 billion. As a result 
of a new expansion project, assume the VaR figure increases to $1.1 billion. In order to 
offset the risk of the new project, the firm would need to do the following: 

1 . Raise additional capital of $100 million. 

2. Invest this additional capital without increasing the overall risk of the firm. 

If the cost of the additional capital is 6%, and the new project is expected to last one 
year, then the new project would need to generate an additional $6 million to maintain 
the economic capital of the firm. Looked at another way, the expected benefit of the new 
project should be reduced by $6 million to compensate for the incremental risk to the firm. 

These decisions regarding how the risk of new projects will affect the total risk of the firm 
are further complicated by the correlations of the expected returns of the projects. If two 
new projects are less than perfectly correlated, the incremental increase in total risk will be 
less. One way to account for any possible diversification benefits is to reduce the cost of 
capital of projects that are expected to have lower correlations with existing operations. 
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Risks to Retain and Risks to Layoff 

Many risks can be hedged inexpensively with derivatives contracts. Examples include 
exposures to changes in exchange rates, interest rates, and commodities prices. Rather than 
face the risk that unexpected cash shortfalls due to these exposures might negatively affect 
the ability of the firm to carry out its strategic plan, the firm should hedge these exposures. 

Other risks cannot be inexpensively hedged. These are risks where the firms management 
either has an informational advantage over outsiders or the ability to manage the outcome 
of the risk-taking activity. A counterparty to a transaction that hedges such risks would 
require very high compensation to be willing to take on the transferred risks. The firms 
business risks fall into this category. 

The guiding principle in deciding whether to retain or layoff risks is the comparative 
advantage in risk bearing. A company has a comparative advantage in bearing its strategic 
and business risks, because it knows more about these risks than outsiders do. Because of 
this informational advantage, the firm cannot transfer these risks cost effectively. Moreover, 
the firm is in the business of managing these “core” risks. On the other hand, the firm has 
no comparative advantage in forecasting market variables such as exchange rates, interest 
rates, or commodities prices. These “noncore” risks can be laid off. By reducing noncore 
exposures, the firm reduces the likelihood of disruptions to its ability to fund strategic 
investments and increases its ability to take on business risks. 
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Key Concepts 



LO 39.1 

Enterprise risk management (ERM) is the process of managing all a corporations risks 
within an integrated framework. 



LO 39.2 

The macro benefit of ERM is that hedging corporate diversifiable risk improves 
management s ability to invest in value-creating projects in a timely manner and improves 
the firms ability to carry out the strategic plan. 

The micro benefit of ERM requires decentralizing risk management to ensure that each 
project s total risk is adequately assessed by project planners during the initial evaluation 
of the project. The two main components of decentralizing the risk-return tradeoff 
are consideration of the marginal impact of each project on the firms total risk and a 
performance evaluation system that considers unit contributions to total risk. 



LO 39.3 

The goal of risk management is to optimize (not eliminate) total risk by trading off the 
expected returns from taking risks with the expected costs of financial d is tress. Financial 
distress in this case is defined as circumstances where the firm is forced to forego positive 
NPV projects. 



LO 39.4 

The conceptual framework of ERM is a four-step process: 

« Determine the firms risk appetite. 

• Estimate the amount of capital needed to support the desired level of risk. 

• Determine the optimal combination of capital and risk that achieves the target credit 
rating. 

• Decentralize the management of risk. 



LO 39.5 

Economic value and accounting value are likely to differ. Management must decide which 
value is most representative of the firm’s risk exposure, and design their risk management 
program accordingly. 



LO 39.6 

Due to diversification effects of aggregating market, credit, and operational risk, firm-wide 
VaR will be less than the sum of the VaRs from each risk category. This suggests that the 
correlation among risks is some value less than one. 
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LO 39.7 

Regulatory capital requirements may differ significantly from the capital required to achieve 
or maintain a given credit rating (economic capital). 

Because regulatory capital requirements are typically based on accounting capital, rather 
than economic capital, a firm with economic values in excess of accounting values may be 
penalized, and may have to maintain higher amounts in liquid assets to cover the shortfall. 



LO 39.8 

The economic capital of the firm must be put to productive use. If a firm accumulates 
excess economic capital that is not employed productively, investors will reduce the value of 
the firm. 
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Concept Checkers 



1 . Reducing diversifiable risk creates value: 

A. only when markets are perfect. 

B. because it is costly for shareholders to eliminate diversifiable risk through their 
own actions. 

C. because reducing diversifiable risk mitigates the underinvestment problem that 
can occur when investors have imperfect information about the firm’s projects. 

D. only when it results in a permanent reduction in cash flow. 

2. Effective enterprise risk management includes all of the following except: 

A. centralized evaluation of every project s risk. 

B. a project is only accepted if its return is adequate after considering the cost of 
the project’s contribution to total firm risk. 

C. the projects planners perform the initial evaluation of project risk. 

D. periodic evaluations of the performance of business units consider each unit’s 
contribution to total risk. 

3. The goal of enterprise risk management (ERM) can best be described as maximizing 
firm value by: 

A. eliminating the total risk of the firm. 

B. minimizing the total risk of the firm. 

C. optimizing the total risk of the firm. 

D. eliminating the probability of financial distress. 

4. In determining the relative importance of economic value compared to accounting 
performance in its enterprise risk management program, a firm should: 

A. rely on accounting performance because it will be more accurate. 

B. rely on economic value because it will be more accurate. 

C. base its decision on the input of project-level managers. 

D. base its decision on the objective of the ERM program. 

5. Which risk is least likely to be beneficial for a company to layoff? 

A. Currency exchange rate risk. 

B. Business risk. 

C. Commodities price risk. 

D. Interest rate risk. 
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Concept Checker Answers 



1. C When markets are not perfect (i.e., investors’ information about project values is 

incomplete), the firm may not be able to raise funds on fair terms. For a firm faced with an 
unexpected drop in operating cash flow, this can lead to the underinvestment problem, where 
the company passes up valuable strategic investments rather than raise equity on onerous 
terms. The inability to fund strategic investments can result in a permanent reduction in 
shareholder value even if the cash shortfall is temporary. Hedging diversifiable risk mitigates 
the underinvestment problem and creates value, even though shareholders can eliminate 
diversifiable risk at low cost by diversifying their portfolios. 

2. A Central to ERM is the idea that a decentralized approach to the evaluation of project risks 

focuses managers throughout the firm on the importance of properly considering the risk 
and return implications of projects. 

3. C The goal of ERM is to optimize the total risk of the firm. Eliminating total risk is not 

possible. Minimizing total risk would preclude accepting risky projects that would allow 
the firm to expand and maximize value. These risky projects will increase the probability of 
financial distress. The goal of ERM is to optimize the risk of distress relative to the potential 
returns from the risky projects. 

4. D There are certain situations where either accounting values or economic values will more 

accurately reflect the firms situation. The determining factor in choosing between economic 
values and accounting values is the objective of the program. For example, if the objective is 
maintaining a rating, based in large part on accounting numbers, then accounting numbers 
will assume more relative importance. 

5. B A company has a comparative advantage in bearing its strategic and business risks because 

it knows more about these risks than outsiders do. The firm is in the business of managing 
these “core” risks. The firm has no comparative advantage in forecasting market variables 
such as exchange rates, interest rates, or commodities prices. These “noncore” risks can be 
laid off. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Internal Loss Data 



Topic 40 

Exam Focus 

This topic discusses the seven categories of operational risk events defined in Basel II and 
describes criteria for allocating operational losses to individual business lines within a 
firm. For the exam, understand that the collection of loss data is a key element of a firm’s 
operational process and know the purposes for collecting this data. Also, know the seven 
Basel II risk events and be familiar with examples of Level 2 and Level 3 categories for each 
event type. Finally, be familiar with the mi n imum reporting requirements for a loss event, 
including the net and gross loss amount, date of the event, event causes, and how to allocate 
the loss to a specific business line. 



Collecting Internal Loss Data 



LO 40.1: Summarize the process of collecting internal operational loss data. 



As you can see in the operational risk framework illustrated in Figure 1 , collection of loss 
data is a key element of a firms operational process. It has been found that collecting and 
analyzing operational risk events provides valuable insights into a firms operational risk 
exposures. When loss data is not collected, it could be perceived that operational risk 
management issues are not a concern. Usually once a firm begins to collect loss data, the 
organization gains a new appreciation of their operational risks. 

Figure 1: Internal Loss Data in the Operational Risk Framework 
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Why Collect Operational Risk Event Data? 

The first step in collecting risk event data is to understand why it should be collected in the 
first place. The design of a loss event database is driven by the purpose(s) of the program 
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and should include collection policies, procedures, standards, and guidelines. Below are 
possible reasons to collect loss event data: 

• For use in capital modeling purposes. 

• To identify control weaknesses. 

• To initiate risk mitigation activities when events occur. 

• To evaluate risk events and outcomes. 

• To understand operational risk exposures and areas of excessive risk. 

• To use the event collection process to entrench operational risk discipline. 

Each purpose listed will result in different design elements and policies for various loss 
data collection programs. To be most effective, operational risk event programs should be 
designed around the business goals and culture of the firm and should be accompanied by 
a strong training program to bolster employee participation. The audit department should 
audit various departments against internal policies, procedures, and sta n dards. 

Who Should Collect the Loss Data? 

The responsibility for reporting operational risk events must be clear to ensure employee 
participation. Designating a representative in each department will help to ensure that loss 
events are collected properly. Assigning individuals this responsibility empowers employees 
to seek out and report events that might have otherwise gone unnoticed and ensures that 
employees feel ownership of the reporting responsibility. 

A side effect of a good loss collection process is that some departments will be able to 
identify events in other departments (e.g., a finance department might notice loss events 
during reconciliation). For this reason, it may be wise to give certain departments the 
additional responsibility to inform the operational risk department of all events that they 
become aware of. It may be helpful to adopt an “if you see it, you must report it” policy 
across all departments to help ensure that a loss event does not go unreported. Note that the 
reporting of an event is an indication of an effective operational risk management program; 
an employee reporting an event should not be faulted. 

One option for collecting loss data is to provide an open database where all employees can 
enter an event. If an open database is not practical, there must be a policy in place requiring 
individuals to report events to a designated risk event reporter. Should a firm choose to 
adopt an open database solution, the amount of data entry required of the initial reporter 
should be minimal, with more details being added by staff trained in the collection of 
loss event data. This process will help to minimize poor quality reporting under an open 
database approach. 

What Should Be Collected in a Loss Data Program? 

Any event that meets a firm’s definition of an operational risk event should be recorded 
in the loss event database per the conditions of the operational risk event policy. The 
most important aspect of entering an event is to assign it to only one of the Basel II risk 
categories. Many firms adopt Basel II categories at the highest level and then customize 
lower level entries to match their firms specific needs. 
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LO 40.2: Describe the seven categories of operational risk events as defined in 
Basel II and identify examples of each. 



Every loss event should be mapped to the risk event categories outlined in the firms 
operational risk management policies and procedures. Basel II provides seven categories of 
loss events that most firms have adopted or adapted to meet their own needs. These loss 
event categories are shown in Figure 2. At the highest level, these categories would seem to 
effectively capture all potential operational risks (though it can sometimes be difficult to 
assign an event to just one category). 

It is important to recognize that the severity and frequency of losses can vary dramatically 
among the categories. For example, loss events are small and very frequent in the Execution, 
Delivery, and Process Management category. However, in the Clients, Products, and 
Business Practices categories, losses are infrequent but can be very large. The modeling of 
loss event data differs for each category and, thus, it is important to make sure every event is 
placed in the appropriate group. When assigning loss events, consistency is more important 
than accuracy. Thus, effective operational risk management requires that similar events are 
consistently categorized in the same way. 



Figure 2: Categories of Operational Risk Events 



Event Type Category 
(Level 1) 

Internal Fraud 



External Fraud 

Employment Practices 
and Workplace Safety 

Clients, Products, and 
Business Practices 

Damage to Physical 
Assets 



Definition 



Losses due to acts of a type intended to defraud, misappropriate 
property, or circumvent regulations, the law, or company policy, 
excluding diversity/ discrimination events, which involves at least one 
internal party. 

Losses due to acts of a type intended to defraud, misappropriate 
property, or circumvent the law, by a third party. 

Losses arising from acts inconsistent with employment, health, or safety 
laws or agreements, from payment of personal injury claims, or from 
diversity/ discrimination events. 

Losses arising from an unintentional or negligent failure to meet a 
professional obligation to specific clients (including fiduciary and 
suitability requirements) or from the nature or design of a product. 

Losses arising from loss or damage to physical assets from natural disaster 
or other events. 



Business Disruption and 
System Failures 

Execution, Delivery, 
and Process 
Management 



Losses arising from disruption of business or system failures. 

Losses from failed transaction processing or process management from 
relations with trade counterparties and vendors. 



Source: Basel Committee on Banking Supervision, Annex 9, Basel II: International Convergence of 
Capital Measurement and Capital Standards: A Revised Framework, 2006. 
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Internal Fraud 

Internal fraud can be described as losses due to acts intended to defraud, misappropriate 
property, or to circumvent regulations, the law, or company policy (excluding diversity/ 
discrimination events) that involves at least one internal party. This category accounts for 
events where there has been intentional wrongful behavior by an employee. It is especially 
important that reporting fraud events in this category be done carefully. Often legal review 
is required before making a loss event entry. Also, only minimal loss information may be 
reported to ensure confidentiality. 

In Annex 9 of the Basel II document, the Internal Fraud category is further explained at 
a lower level, Level 2. It is broken down into two subcategories (at Level 2) and then into 
examples (at Level 3), as shown in Figure 3. 



Figure 3: Internal Fraud 



Categories (Level 2) 


Activity Examples (Level 3) 


Unauthorized Activity 


Transactions not reported (intentional) 

Transaction type unauthorized (with monetary loss) 
Mismarking of position (intentional) 


Theft and Fraud 


Fraud/credit fraud/worthless deposits 
Theft/ extortion/ embezzlement/ robbery 
Misappropriation of assets 
Malicious destruction of assets 




Forgery 
Check kiting 
Smuggling 

Account takeover/impersonation/etc. 
Tax noncomp liance/evasion (willful) 
Bribes/ kickbacks 




Insider trading (not on firm’s account) 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 



External Fraud 

External fraud consists of losses due to acts intended to defraud, misappropriate property, 
or circumvent the law, by a third party with no collusion or participation from any internal 
employee. The Basel categories for this type of fraud are shown in Figure 4. 



Figure 4: External Fraud 



Categories (Level 2) 


Activity Examples (Level 3) 


Theft and Fraud 


Theft/Robbery 




Forgery 




Check kiting 


Systems Security 


Hacking damage 




Theft of information (with monetary loss) 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 
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Employment Practices and Workplace Safety 

This risk category includes losses arising from acts inconsistent with employment and health 
and safety laws, such as payment of personal injury claims or from diversity/ discrimination 
events. This category captures losses resulting from harm suffered by employees either due 
to a workplace accident or due to mistreatment by the firm. 

Events in this category may be highly sensitive, and some firms only allow the human 
resources department to make entries for this type of risk event. Discriminatory action, for 
example, is likely to be kept confidential, and only minimal information is entered into the 
database. The Basel categories for these kinds of loss events are shown in Figure 5. 



Figure 5: Employment Practices and Workplace Safety 



Categories (Level 2) 


Activity Examples (Level 3) 


Employee Relations 


Compensation, benefit, termination issues 
Organized labor activity 


Safe Environment 


General liability (slip and fall, etc.) 
Employee health and safety rules events 
Workers’ compensation 


Diversity and Discrimination 


All discrimination types 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 



Clients, Products, and Business Practices 

These types of losses arise from unintentional or negligent failures to meet a professional 
obligation to specific clients (including fiduciary and suitability requirements) or from 
the nature or design of a product. This event type is where we are likely to see some of the 
largest loss events because legal losses are often entered in this category. 

A class action lawsuit might lead to this type of loss as would any large litigation involving 
a flawed financial product. Clients, Products, and Business Practices events can have a 
significant financial cost as well as a serious reputational impact because these risk events 
are more likely to get press coverage. The Basel categories for these loss events are shown in 
Figure 6. 
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Figure 6: Clients, Products, and Business Practices 



Categories (Level 2) 


Activity Examples (Level 3) 


Suitability, Disclosure, and Fiduciary 


Fiduciary breaches/guideline violations 

Suitability/ disclosure issues 

Retail customer disclosure violations 




Breach of privacy 

Aggressive sales 

Account churning 

Misuse of confidential information 




Lender liability 


Improper Business or Market Practices 


Antitrust 




Improper trade/market practices 
Market manipulation 
Insider trading (on firms account) 
Unlicensed activity 
Money laundering 


Product Flaws 


Product defects (unauthorized, etc.) 
Model errors 


Selection, Sponsorship, and Exposure 


Failure to investigate client per guidelines 
Exceeding client exposure limits 


Advisory Activities 


Disputes over performance of advisory activities 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 



Damage to Physical Assets 

Damage to physical assets includes losses due to natural disasters or other events. Most 
events in this category are likely to be covered by insurance, at least in part. However, 
the original loss should still be captured because it may take a year or more to receive any 
recovery from insurance. During this time the firm must demonstrate that it has enough 
capital to cover the loss. The Basel categories for these loss events are shown in Figure 7. 



Figure 7: Damage to Physical Assets 



Categories (Level 2) 


Activity Examples (Level 3) 


Disasters and Other Events 


Natural disaster losses 

Human losses from external sources (terrorism, vandalism) 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 



Business Disruption and System Failures 

This risk category captures losses arising from disruption of business activities or system 
failures. Examples of these types of events include major telecommunications network or 
power outages, as well as extreme weather conditions that disrupt business activities. 

Such events are serious but are best measured in terms of lost opportunities, rather than 
in direct financial losses, therefore it is often hard to put a value on losses in this category. 
Ideally, an operational risk event database would capture both direct and opportunity costs, 
but many firms do not take this extra step. Dimensioning these types of losses presents 
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further challenges because the losses need to be assigned to a single business line, even if the 
impact is firm-wide. In such a case, an allocation methodology needs to be determined. The 
Basel categories for these loss events are shown in Figure 8. 



Figure 8: Business Disruption and System Failures 



Categories (Level 2) 


Activity Examples (Level 3) 


Systems 


Hardware 

Software 

Telecommunications 
Utility outage/disruptions 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 



Execution, Delivery, and Process Management 

These types of losses stem from failures in transaction processing or relationships with 
counterparties and vendors. This risk category is where the majority of loss events occur, but 
many of the losses are likely to be small, so the severity of this category may be relatively low 
in comparison to that of other categories. As seen in Figure 9, the list of examples is quite 
comprehensive and includes almost anything that could go wrong in the process of making 
a trade, onboarding a client, creating regulatory reports, or dealing with third parties. 



Figure 9: Execution, Delivery, and Process Management 



Categories (Level 2) 


Activity Examples (Level 3) 


Transaction Capture, Execution, and 


Miscommunication 


Maintenance 


Data entry, maintenance, or loading error 
Missed deadline or responsibility 
Model/ system misoperation 
Accounting error/ entity attribution error 
Other task misperformance 
Delivery failure 
Collateral management failure 
Reference data maintenance 


Monitoring and Reporting 


Failed mandatory reporting obligation 
Inaccurate external report (loss incurred) 


Customer Intake and Documentation 


Client permissions/ disclaimers missing 
Legal documents missing/ incomplete 


Customer/ Client Account Management 


Unapproved access given to accounts 
Incorrect client records (loss incurred) 
Negligent loss or damage of client assets 


Trade Counterparties 


Nonclient counterparty misperformance 
Miscellaneous nonclient counterparty disputes 


Vendors and Suppliers 


Outsourcing 
Vendor disputes 



Source: Basel Committee on Banking Supervision, Annex 9, 2006. 
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Using Basel Risk Categories to Report Operational Loss Data 



LO 40.3: Explain the process a bank should use to report operational loss data, 
including the setting of thresholds, determining the loss amount, setting a 
reference date, and describing the causes of a loss event. 



The Basel risk categories are used to capture a risk event, not a cause. For this reason, it 
is important to be clear about the differences between risk impacts and their causes when 
designing risk categorization taxonomy (i.e., classifications). 

Basel Level 1 risk categories should be applied across a firm’s operational risk framework. 
However, if a firm uses a different set or number of Level 1 categories, they must internally 
map these categories to the seven Basel risk categories. 

Setting Thresholds for Losses 

The first step in setting thresholds for losses is to have a clear policy and standards for the 
minimum requirements for reporting operational risk event data. Loss standards should 
contain at least the minimum reporting criteria mandated by regulation plus internal data 
requirements of risk management practices at the firm. The operational risk department 
should review the firms business structure regularly to ensure that any acquisitions, mergers, 
or business changes are incorporated into the loss data program. 

The loss data should be comprehensive and capture all material activities and exposures 
from the firm’s subsystems and geographic locations. However, it can be extremely difficult 
to ensure that every area of the firm is effectively providing event loss data. 

The loss data program must include all losses above a de minimis internal loss data 
threshold, such as €10,000. In practice, setting a threshold depends on the risk appetite of 
the firm and the regulatory requirements it needs to meet. So even though Basel II suggests 
that a €10,000 threshold would be appropriate, firms have selected thresholds ranging from 
zero to $100,000. In recent years, however, most firms now require mandatory reporting of 
all events over €10,000 or $10,000. 

When setting thresholds, one must consider the reporting burden that will be placed on the 
firm. For example, a zero dollar threshold would require a very high amount of reporting. In 
such an instance, every error should be captured in the loss database, literally meaning that 
every lost pen must be reported. In practice, only in areas where it is practical to collect the 
required data can zero threshold policies be implemented. Trading errors are a great example 
of this because data feeds make it easy to record these events. Furthermore, regardless of the 
threshold, some departments may want to capture all loss data. An example of this would be 
a finance department that wishes to record every wire transfer error. 

Another important consideration in setting low thresholds is that the details that may 
need to be entered into the loss database may be inappropriate when the size of the loss is 
considered. As a result, a firm with a zero threshold for operational risk events is likely to 
have a higher threshold on the requirement to enter full details. 
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Determining the Amount of Loss 

Each loss data entry must include the loss amount. This amount can be a source of 
contention, and it may require intervention from the operational risk department ora 
dedicated controller to clear up any confusion about the final amount entered. When 
determining the amount of loss, the gross loss amount will differ from the net loss upon 
recoveries. As a result, both the gross and net amounts should be entered into the database. 

There are many reasons conflicting views on the size of the loss can exist. For example, a 
trade error may give rise to disagreements about the time and price used in calculating the 
loss. Similarly, a hedging error may produce a loss of an indeterminate size. Along with 
ensuring that the correct loss amount is entered, serious consideration should be given to 
which losses should be included. 

Regarding loss amounts, the bank should include in gross losses: 

• Direct charges, including impairments and writedowns due to operational risk events. 
Direct charges affect the statement on comprehensive income. 

• Costs incurred as a result of the operational risk event (including external expenses with 
a direct link to the event). Some internal costs may not be relevant to capital estimation 
but may be relevant to understanding the bank’s risk profile. For example, excessive 
bonus payments that resulted from internal fraud or unapproved trading activity should 
be considered for inclusion in the calculation dataset, although this is not customary in 
gross loss calculations. 

• Provisions (reserves). The potential operational loss impact is reflected in the income 
statement. 

• Pending losses stemming from operational risk events that have a definitive financial 
impact. The pending loss is included in the scope of the operational risk event within 
a time period commensurate with the size and age of the pending item either through 
scenario analysis or through recognition of the actual amount in the loss database. In 
other words, the bank should include pending losses in the calculation even if they have 
to estimate the loss with scenario analysis or some other method. 

The bank should exclude from gross losses: 

• Insurance premiums. 

• Expenses used to enhance the business after the operational risk event (based on 
recommendations for improvements and so on). 

• Costs of maintenance contracts on property, plant, & equipment at the bank. 

The following items are included or excluded depending on their materiality: 

• Timing losses. Timing losses are defined by the Basel Committee as “the negative 
economic impacts booked in an accounting period, due to operational risk events 
impacting the cash flows or financial statements of previous time periods.” The effects 
are usually temporary (e.g., mark-to-market errors, overstatement of revenues) and have 
a net effect of zero over time. However, material timing losses should be included if they 
span two or more accounting periods (the full amount including makeup payments, 
penalties, and interest) when they give rise to legal events. 
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• Rapidly recovered loss events are operational losses that are recovered quickly. For 

example, a bank may mistakenly transfer a large sum to the wrong party only to have the 
money returned quickly. This may be considered a gross loss and a recovery. However, if 
a full recovery is made quickly, it is considered a “near miss.” Finally, if some but not all 
of the funds are recovered quickly, only the unrecovered amount is considered a loss. 

Gross loss can be measured using mark-to-market. In this case, the gross loss is the 
adjustment made to the comprehensive statement of income because the operational 
risk loss is typically the same as the accounting loss. Alternatively, the bank can use the 
replacement cost method. This is used if assets or accounts that are not typically marked- 
to-market are affected by the loss (e.g., property, plant, & equipment or intangible assets). 
The gross loss is the replacement cost of the item (or cost to restore the item to its pre-loss 
condition). 



Indirect Costs 

Indirect costs, such as legal fees or costs to improve operational controls, should be included 
with the direct impact of the loss. Legal fees can have a huge impact on the amount of the 
loss as they can be high and may be incurred over several years. 

So what happens to an event once costs cause it to cross the reporting threshold? The firm’s 
loss data policy must clearly delineate when such items are exempt (e.g., if initial losses were 
below the threshold, are the losses included once associated costs go over the threshold?). 
This is why there needs to be a mechanism for tracking small events that have the potential 
to become large events due to high legal fees. 

A firm’s loss data policy, procedures, and standards must clearly state whether indirect costs 
must be captured and, if so, the methods used to calculate them. 



Recoveries 

Each loss data entry must include any recoveries against the gross loss amount. For example, 
if a wire transfer is sent to the wrong party but is quickly returned, it may be considered a 
“near miss” and not a realized event. Other firms might consider the incorrect wire transfer 
a gross loss, and the return of it as a recovery of assets, for a net loss of zero. The treatment 
of these types of events under the loss data policy must be clear in order to avoid confusion 
and maintain consistency. 

Setting a Reference Date 

It can be surprisingly difficult to pin down the date of a loss event. For example, if the loss 
resulted from several consecutive failings of controls, should the reference date correspond 
to when the first control failing occurred or the last day a control failing occurred? Similarly, 
one could count the date a loss hits the account or the date the loss was detected. This is 
why rules regarding dates must be clearly defined in the loss data policies. 
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Legal Reserves 

Regulations guide firms that legal reserves should be collected at the time of the reserve; 
however, some might argue that this could amount to double counting. After all, why is it 
necessary to collect loss data for something already reserved? Another issue is the possibility 
that such information could be discovered and compromise the institution or lead to 
further litigation. However, most firms have procedures to protect the confidentiality of 
these matters by only providing minimal information to the loss database. 

In spite of these arguments, regulators believe it is better to include all known losses as 
promptly as possible. Regulators further point out that holding a reserve is not double 
counting capital as the event is only one data point in the operational risk capital 
calculation. 



Legal Fees 

Date issues may arise because legal fees can continue to accrue over time, which leads some 
firms to only enter a legal event once it is final. {Final might mean when a final settlement 
is reached or when the case is closed with no further appeals anticipated.) When an event is 
final, legal fees accrued up to that date are entered as a final amount. However, some cases 
take many years, and if legal reserves are being taken, it may be necessary for legal fees to be 
collected on a regular basis. 

Regulators recommend that an event be included in the loss event database at the date of 
reserve, that any changes to exposure should be captured in the capital modeling through 
alternative methods (such as scenario analysis), an d that there should be a robust process to 
update the amount between the reserve date and the final settlement date. 

Describing the Causes of a Loss Event 

Each loss data entry must include descriptions of the drivers or causes of the loss event. 
These descriptions often contain sensitive information, requiring firms’ legal departments 
to review and edit entries to avoid exposing the company to legal risk. A firm may include 
a list of possible causes for reporters to choose from that are usually related to the firm’s 
definition of operational risk. Firms may have simple causes to choose from such as people, 
process, systems, and external events, but can have far more sophisticated lists as well. 

One maj or issue with the reporting and description of loss events is the need to avoid 
assigning blame or fault, which can serve as a disincentive to reporting loss events. Clear 
guidelines exist on necessary reporting items for a description, and these guidelines need to 
be accompanied by appropriate training to bolster employee participation. 

The Operational Riskdata eXchange Association (ORX) is a not-for-profit association that 
collects operational risk event data from a consortium of banks. This association requires 
member banks to select a cause for any loss event over $10 million. Because there may be 
more than one cause for an event, ORX allows its members to select up to three causes and 
also provides lower-level descriptions in their standards document (easily accessible online). 

The ORX provides a helpful taxonomy of causes as shown in Figure 10. 
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Figure 10: ORX Causes 



Cause 


Description 


External 


Actions by agents external to the firm 


People/Staff 


Factors related to actions by staff/employees or management of staff/ 
employees of the firm or consolidated companies 


Governance and 
Structure 


Factors related to the governance and oversight practices of the bank 


Processes 


Factors related to the way the firm is organized and certain broad 
management processes 


Internal Systems 
Failures 


Factors related to inadequacies or failures in internal technology, physical, 
and communication systems 



Source: ORX Operational Risk Reporting Standards, Edition 201 1, Appendix: detailed description of 
data categories, pp. 86—93. 



Allocating Operational Losses to Business Lines 



LO 40.4: Describe criteria for allocating operational losses to individual business 
lines within a firm and for the handling of boundary events. 



Objective and well-documented criteria must be used for allocating losses to specific 
business lines. The first step in this process is to determine which front office area 
experienced the loss so an owner can be assigned to the situation. The process of assigning 
ownership can provoke disagreement regarding the cause of the loss as the operational loss 
is allocated to the profit and loss account of the appropriate business area. For this reason, 
firms should have clear, objective criteria and a limited list of business areas to select from 
when identifying where the loss should impact the firm’s account. 

Basel II provides the following guidance on business line categorization as shown in 
Figure 1 1 . 
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Level 1 


Level 2 


Activity Groups 


Corporate 


Corporate Finance 


Mergers and acquisitions, underwriting, privatizations, 


Finance 


Municipal 


securitization, research, debt (government, high 




Government Finance 


yield), equity, syndications, IPO, secondary private 




Merchant Banking 
Advisory Services 


placements 


Trading and 


Sales 


Fixed income, equity, foreign exchanges, commodities, 


Sales 


Market Making 


credit, funding, own position securities, lending and 




Proprietary Positions 
Treasury 


repos, brokerage, debt, prime brokerage 


Retail 


Retail Banking 


Retail lending and deposits, banking services, trust and 


Banking 




estates 




Private Banking 


Private lending and deposits, banking services, trust 
and estate, investment advice 




Card Services 


Merchant/ commercial/corporate cards, private labels, 
and retail 


Commercial 


Commercial Banking 


Project finance, real estate, export finance, trade 


Banking 




finance, factoring, leasing, lending, guarantees, bills of 
exchange 


Payment and 


External Clients 


Payments and collections, funds transfer, clearing and 


Settlement 




setdement 


Agency 


Custody 


Escrow, depository receipts, securities lending 


Services 




(customers) corporate actions 




Corporate Agency 
Corporate Trust 


Issuer and payer agents 


Asset 


Discretionary Fund 


Pooled, segregated, retail, institutional, closed, open, 


Management 


Management 


private equity 




Non-Discretionary 
Fund Management 


Pooled, segregated, retail, institutional, closed, open 


Retail 

Brokerage 


Retail Brokerage 


Execution and full service 



Source: Basel Committee on Banking Supervision, Annex 8, Basel II: International Convergence of 
Capital Measurement and Capital Standards: A Revised Framework, 2006. 



Because the organizational structure of some organizations may not fit well into this 
categorization structure, many firms have developed a behind-the-scenes mapping that 
meshes with the Basel II structure. This allows the firm to collect data according to their 
own systems but also to group data for regulatory reporting. 

Criteria for Allocation to Central Function 

Basel II requires banks to develop specific criteria for assigning loss data that arises from a 
centralized function or activity that spans more than one business line and related events 
over time. 
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All Impacted Departments 

When entering loss data, all departments that are involved in the event must be identified 
in the entry, which helps to promote internal communication regarding the event. Many 
events impact several areas of the firm, which is why there needs to be a strong workflow 
component to facilitate discussions. 

Boundary Events 

Credit and market risk-related events should be flagged as boundary events; there are some 
simple differences between these two types of events. It is a generally accepted practice that 
market risk boundary events are not captured in market risk capital calculations and are 
instead included in operational risk capital calculation. In contrast, credit risk boundary 
events are captured in credit risk capital calculations and are excluded from operational risk 
capital calculations. 

An example of a credit risk boundary event is when a counterparty fails, but the collateral 
has not been requested. An example of a market risk boundary event would be if a trade 
error resulted in a large loss because the market moved strongly against the position. 
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Key Concepts 



LO 40.1 

The collection of loss data is a key element in a firms operational process, and it provides 
valuable insights into a firms operational risk exposures. There are many purposes for 
collecting loss data, including capital modeling, identification of control weaknesses, 
mitigating the risk of events, evaluating risks, and embedding operational risk discipline. 

For a loss data collection program to be most effective, it should be designed around 
business goals and be accompanied by a strong training program to ensure employee 
participation. There also needs to be a clear delineation of reporting responsibility that may 
include a designated representative in each department. Furthermore, it may also be helpful 
to adopt an “if you see it, you must report it” or an “if you see it, you must ensure someone 
reports it” policy across all departments. 



LO 40.2 

Every loss event should be mapped to risk event categories outlined in the firms operational 
risk policies. Basel II provides seven risk categories that generally capture all operational 
risks. It is important to understand that because the severity and frequency of losses 
may differ among categories, modeling for loss events is different as well. It is extremely 
important that every risk event is placed in the appropriate category, with the first goal 
being consistency rather than accuracy. 



LO 40.3 

Basel II regulations require that Basel risk categories be used to report operational risk 
events. These categories are used to capture risk events, not causes. The Basel Level 1 risk 
categories should be applied across a firm s operational risk framework. If a firm uses a 
different set or number of Level 1 categories internally, the organization must map those 
categories to the seven Basel risk categories. 

The first step in setting thresholds for losses is to have clear policies on the minimum 
reporting requirements. The loss data must be comprehensive and capture all material 
activities and exposures from the firms subsystems and geographic locations. The loss data 
program must include all losses above a de minimis gross loss threshold such as $10,000. 

Each loss data entry must include the loss amount, with both gross and net amounts being 
entered into the database. Indirect costs, such as legal fees or the cost to fix a failure, must 
also be entered. Any recoveries from the loss must be included in the database to create the 
net loss amount. 

It can be difficult to pin down the exact date of a loss due to issues such as consecutive 
failings, legal reserve issues, and the timing of legal fees. Each loss data entry must include 
a description of the event; firms may provide a list of possible causes. One concern with 
this process is to avoid assigning blame to the person reporting the event, which would 
discourage the reporting of losses. 
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LO 40.4 

Objective and well-documented criteria must be used to allocate losses to specific business 
lines. The first step is to determine the area that experienced the loss so an owner can be 
assigned to the situation. To address a loss event (such as network outages) that occur in a 
central function of the firm, the loss data policy must clearly address how resulting losses are 
allocated to each business line. 

Credit and market risk-related events should be flagged as boundary events. It is a generally 
accepted practice that market risk boundary events are not captured in market risk capital 
calculations and are instead included in operational risk capital. In contrast, credit risk 
boundary events are captured in credit risk capital calculations and are excluded from 
operational risk capital. 
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Concept Checkers 



1 . Which of the following actions least accurately reflects the purposes of collecting loss 
event data? 

A. To identify control weakness. 

B. To perform capital modeling. 

C. To initiate risk mitigation activities. 

D. To create a strong training program. 

2. Each loss data entry must include the loss amount, which is comprised of: 

A. gross loss. 

B. net loss. 

C. both gross loss and net loss. 

D. neither gross loss nor net loss. 

3. Which of the following items should be included in the gross loss amount? 

A. Costs of general maintenance contracts on property, plant, & equipment. 

B. Internal or external expenditures to enhance the business after an operational 
risk event. 

C. Insurance premiums. 

D. Reserves (provisions). 

4. A credit risk boundary event should be included in which of the following sets of 
capital calculations? 

A. Market risk calculations. 

B. Operational risk calculations. 

C. Credit risk calculations. 

D. Reserve calculations. 

5. Transaction capture, execution, and maintenance are Level 2 categories for which 
major Basel II event type category? 

A. Employment Practices and Workplace Safety. 

B. Execution, Delivery, and Process Management. 

C. Clients, Products, and Business Practices. 

D. Business Disruption and System Failures. 
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Concept Checker Answers 



1. D A strong training program to bolster employee participation should accompany operational 

risk management programs, but it is not the purpose of collecting the data. 

2. C Each loss data entry must include the loss amount. When determining the amount of loss, 

one must keep in mind that the actual gross loss amount differs from the net loss upon 
recoveries. Both the gross and net amounts should be entered into the database. 

3. D Costs of general maintenance contracts on property, plant, & equipment, internal or external 

expenditures to enhance the business after an operational risk event, and insurance premiums 
must be excluded from the gross loss amount. 

4. C It is a generally accepted practice that credit risk boundary events are captured in credit risk 

capital calculations and are excluded from operational risk capital calculations. 

5. B Transaction capture, execution, and maintenance are Level 2 categories for the event type 

Execution, Delivery, and Process Management. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



External Loss Data 



Topic 41 

Exam Focus 

This topic examines the motivations for using external operational loss data and compares 
characteristics of loss data from different sources. For the exam, understand why firms are 
motivated to use external data in their internal operational risk framework development 
and the types of data that are available. Also, understand the differences in construction 
methodologies between the ORX and FIRST databases and be able to cite examples of how 
these differences manifest themselves in the data. Finally, be able to describe the Societe 
Generale operational loss event. 



Collecting External Loss Data 



LO 41.1: Explain the motivations for using external operational loss data and 
common sources of external data. 



One reason operational risk departments look at events outside the firm is to gain valuable 
insights and inputs into operational risk capital calculations. Furthermore, external data is a 
required element in the advanced measurement approach (AMA) capital calculation under 
Basel II. 

External events can be useful in many areas of the firms operational risk framework, as 
these events provide information for risk self-assessment activities. They are key inputs in 
scenario analysis and can help in developing key risk indicators for monitoring the business 
environment. 



Figure 1: External Loss Data in the Operational Risk Framework 
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Risk Culture / Risk Policies and Procedures 



Senior management should take an interest in external events because news headlines can 
provide useful information on operational risk. Examining events among industry peers 
and competitors helps management understand the importance of effective operational risk 
management and mitigation procedures. This is why external data is the key to developing a 
strong culture of operational risk awareness. 
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An example of a huge risk event that impacted industry discipline is the €4.9 billion trading 
scandal at Societe Generale in 2006. This internal loss for Societe Generale demonstrated 
to the financial services industry how operational risk can lead to large losses. In spite of the 
lessons learned from this experience, the financial industry saw another huge trading loss 
event at UBS in 20 1 1 , which led firms to reassess how they respond to external events and 
to ensure any lessons learned do not go unheeded. 

Sources of External Loss Data 

There are many sources of operational risk event data in the form of news articles, journals, 
and email services. Operational risk system vendors offer access to their database of events, 
and there are consortiums of operational risk losses as well. External events are a valuable 
source of information on individual events and also serve as a benchmarking tool for 
comparing internal loss patterns to external loss patterns. This process provides insight into 
whether firm losses are reflective of the industry. 

Subscription Databases 

Subscription databases include descriptions and analyses of operational risk events derived 
from legal and regulatory sources and news articles. This information allows firms to map 
events to the appropriate business lines, risk categories, and causes. The primary goal of 
external databases is to collect information on tail losses and examples of large risk events. 
An excerpt showing the total operational risk loss percentages to date by risk category in the 
IBM Algo FIRST database is shown in Figure 2. 



Figure 2: Operational Risk Losses Recorded in IBM Algo FIRST (Q4 2012) 



Event Type 


% of Losses 


% of Events 


Business Disruption and System Failures 


0.41% 


1.54% 


Clients, Products, and Business Practices 


48.25% 


46.11% 


Damage to Physical Assets 


19.22% 


3.18% 


Employment Practices and Workplace Safety 


0.88% 


5.97% 


Execution, Delivery, and Process Management 


6.68% 


7.28% 


External Fraud 


3.94% 


9.71% 


Internal Fraud 


20.63% 


26.20% 


Total 


100% 


100% 



Through these statistics, we can see some patterns in operational risk events. For example, 
46% of all records fall into the category of Clients, Products, and Business Practices, 
accounting for 48% of dollar value losses. Internal Fraud is another large area of risk 
events, with 26% of records and 21% of losses. Damage to Physical Assets is the next most 
expensive category with 19% of losses but only 3% of events. 
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Figure 2 shows us that within an internal database such IBM Algo FIRST (FIRST), 
operational risk losses from Internal Fraud, Damage to Physical Assets, and Client, 
Products, and Business Practices are more significant than those from other categories. 
However, keep in mind that the FIRST database includes business lines that are not part of 
the Basel-specified business lines. This results in relatively high Damage to Physical Assets 
losses, as insurance company losses are included in that category. 

In Figure 3, we see subsets of losses from the FIRST database. (Note that any losses not 
attributed to one of the Basel business lines have been removed.) 



Figure 3: FIRST Losses by Business Line (Q4 2012) 



Business Line 


% of Losses 


% of Events 


Agency Services 


0.35% 


2 . 22 % 


Asset Management 


14.40% 


16.37% 


Commercial Banking 


23.42% 


17.70% 


Corporate Finance 


17.56% 


9.00% 


Payment and Settlement 


2.72% 


5.90% 


Retail Banking 


23.67% 


20.79% 


Retail Brokerage 


1.30% 


10.33% 


Trading and Sales 


16.58% 


17.70% 


Total 


100% 


100% 



Figure 3 shows about 10% of events occur in the Retail Brokerage business line, but these 
retail brokerage events account for only 1 % of losses because average losses in this business 
line are relatively small. Conversely, we see that Corporate Finance generated 9% of events 
but accounted for 18% of losses. Clearly, average losses in Corporate Finance tend to be 
more expensive. 



We should keep in mind that this analysis is based on publicly available data for operational 
risk events, which is subject to reporting bias. The FIRST database is useful for financial 
services firms to compare their risk profiles to the industry by category and business line. 
FIRST provides insights into events that may not have occurred at a particular firm in the 
risk modeling process. 



Consortium Data 



Besides the FIRST approach to collecting data, there are also consortium-based risk 
event services that provide a central data repository. Operational Riskdata eXchange 
Association (ORX) is a provider of this data, which is gathered from members to provide 
benchmarking. ORX applies quality assurance standards to keep all receipt and delivery of 
data anonymous and to provide consistency in definitions of events. 

Unlike subscription services, ORX data does not suffer from the availability bias that skews 
the FIRST data (which relies on public sources of information). With ORX, all events are 
entered anonymously into the database; however, the data relates only to a small subset 
of firms that are members of the consortium. ORX also uses different business lines than 
FIRST. For example, it splits retail banking into two groups: Retail Banking and Private 
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Banking. It also renames Payment and Settlement to “Clearing.” The ORX database has 
gathered nearly 30,000 events costing its members over €100 billion, which helps highlight 
the potential costs of operational risk. 

ORX publishes reports that summarize the number and amount of losses for each business 
line and risk category. Regarding the reported contributions, the Retail Banking business 
area generates 58% of events; most of them in the External Fraud category. Trading and 
Sales and Commercial Banking follow with about 1 0% of total events each. Retail Banking 
has the biggest share of total costs at 46% of total losses. Execution, Delivery, and Process 
Management produce the largest number of events (36%), with 25% of total costs. Also, 
Clients, Products, and Business Practices accounts for about 17% of events but more than 
50% of losses, which demonstrates that for members of ORX, these events tend to be large. 
Many firms use information from this category to conduct scenario analysis for potential 
“fat tail” events. Data representing dollar value losses of operational risk for each business 
line is shown in Figure 4. 



Figure 4 : Dollar Value Losses by Risk Category and Business Line 
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Subscription vs. Consortium Databases 



LO 41.2: Compare the characteristics of external operational loss data from 
different sources. 



Differences in the collection methods between the ORX and the FIRST databases have a n 
interesting impact on the relative distribution of the loss data. 

Size and Frequency of Losses by Risk Category 

When comparing the size of losses by risk category in the ORX and FIRST databases, we 
see that the FIRST database has a significantly higher percentage of losses for Internal Fraud 
than ORX does. In contrast, ORX has a significantly higher percent of Execution, Delivery, 
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and Process Management losses than does FIRST. This could be because not all Execution, 

Delivery, and Process Management losses are reported by the press, implying that the 
FIRST database is missing many events and has an unavoidable collection bias. 

The primary difference between these two databases with respect to Execution, Delivery, 
and Process Management events is that ORX data is supplied directly from member banks, 
which does not include all banks, implying that ORX also suffers from collection bias. This 
is in contrast to the FIRST database that collects data on all firms, including a significant 
number of firms outside of Basel II compliance. 

Regarding the frequency of losses by risk category, Execution, Delivery, and Process 
Management events are missing from FIRST data, presumably because they rarely get press 
coverage. ORX has a larger frequency of External Fraud than FIRST, which suggests that 
such events are often kept from the press. ORX data also shows a large amount of External 
Fraud due to the participation of retail banks in the consortium. This is because Retail 
Banking includes credit card services, which causes this category to be driven by numerous 
small instances of fraud in retail banking and credit cards. The threshold for reporting loss 
data to ORX is €20,000. 

Size and Frequency of Losses by Business Line 

When comparing the size of losses by business lines in the ORX and FIRST databases, 

ORX losses are heavily weighted toward Retail Banking. Also, Commercial Banking 
accounts for a smaller percentage of losses for ORX than for FIRST, which may be due to 
recent commercial banking events making it into the press and, therefore, into the FIRST 
database (but not the ORX database). 

Regarding the frequency of losses by business line, ORX data is driven by Retail Banking 
events, whereas FIRST events are more evenly distributed among the various business lines. 

Also, the majority of events for ORX and FIRST occur in Retail Banking but by a slimmer 
margin for the FIRST database. 



Challenges with Using External Data 



LO 41.3: Describe the challenges which can arise through the use of external data. 



Many firms’ operational risk systems not only include ORX and FIRST data but are also 
supplemented with information from the firm’s own research and relevant industry news 
and journals. However, as we noted previously about the various differences between ORX 
and FIRST, the databases must be viewed with caution, as there are several challenges with 
using external data. 

For example, external data derived from the media is subject to reporting bias. This is 
because it is up to the press to decide which events to cover, and the preference is for illegal 
and dramatic acts. For instance, consider that a large internal trading fraud might get press 
coverage, while a systems outage might get none. We should also consider that a major gain 
is less likely to be reported by the media than a major loss. Another barrier to determining 
whether an event is relevant is that some external events may be ignored because they are 
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perceived as types of events that “could not happen here.” Finally, the use of benchmark 
data may be a concern because there is a chance that comparisons may not be accurate due 
to different interpretations of the underlying database definitions. 

One of the best ways to use external data is not to spot exact events to be avoided but rather 
to determine the types of errors and control failings that could cause similar losses. External 
data may have direct relevance despite differences in the details. For example, the Societe 
Generale event led many firms to overhaul their fraud controls. 

External data can serve a valuable role in operational risk management if its limitations 
are acknowledged. Databases can provide valuable lessons about risk management and 
highlight trends in the industry. While internal and external databases only tell us about 
what has already gone wrong, the data can be used to implement controls to mitigate the 
chances of similar events repeating, and they provide valuable inputs into the operational 
risk framework. Loss data is also useful for self-assessment, scenario analysis, and key risk 
indicators (KRIs) that indicate loss trends and weaknesses in controls. 



SociLt£ GLnLrale Operational Loss Event 



LO 41.4: Describe the Societe Generale operational loss event, explain the lessons 
learned from the event and summarize how this event was classified by external 
data vendors. 



In January 2008, it was discovered that one of Societe Generale s junior traders, Jerome 
Kerviel, was involved in rogue trading activities, which ultimately resulted in losses of 
€4.9 billion. The multinational bank was fined €4 million, and Mr. Kerviel was sentenced 
to three years in prison. The incident damaged the reputation of Societe Generale and 
required the bank to raise additional funds to meet capital needs. 

Between July 2005 and January 2008, Kerviel established large, unauthorized positions in 
futures contracts and equity securities. To hide the size and riskiness of these unauthorized 
positions, he created fake transactions that offset the price movements of the actual 
positions. Kerviel created fake transactions with forward start dates and then used his 
knowledge of control personnel confirmation timing to cancel these trades right before 
any confirmations took place. Given the need to continuously replace fake trades with new 
ones, Kerviel created close to 1 ,000 fictitious trades before the fraud was finally discovered. 

The operational risk world was galvanized by this event as it demonstrated the dangers 
of unmitigated operational risk. In 2008, many firms were developing operational risk 
frameworks and often focused on the delivery of new reporting, loss data tools, and 
adaptions to their scenario analysis programs. However, even though firms were developing 
internal risk systems, the amount of new regulatory requirements rapidly overcame their 
ability to keep up in practice. With the news of Mr. Kernels activities, many heads of 
operational risk found themselves asking the question “Could that happen here?” 
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IBM Algo FIRST provided an analysis based on press reviews. The highlights of alleged 
contributing factors to this operational loss event are summarized as follows: 

1 . Mr. Kerviel was involved in extensive unauthorized trading activities. 

2. Mr. Kerviel was not sufficiently supervised. 

3. Mr. Kerviel used his knowledge of middle and back office controls to ensure his fraud 
went undetected. 

4. Mr. Kerviel achieved password access to systems allowing him to manipulate trade data. 

A number of reasons were cited that explained how Kernels unauthorized trading activity 
went undetected, including the incorrect handling of trade cancellations, the lack of proper 
supervision, and the inability of the bank’s trading system to consider gross positions. 

Regarding trade cancellations, the bank’s system was not equipped to review trading 
information that was entered and later canceled. In addition, the system was not set up to 
flag any unusual levels of trade cancellations. Regarding the lack of supervision, oversight 
of Kernel’s trading activity was weak, especially after his manager resigned in early 2007- 
Under the new manager, Kernel’s unauthorized trading activity increased significantly. 

Regarding the size of Kernel’s positions, the bank’s system was only set up to evaluate net 
positions instead of both net and gross positions. Thus, the abnormally large size of his 
trading positions went undetected. Had the system properly monitored gross positions, it is 
likely that the large positions would have issued a warning sign given the level of riskiness 
associated with those notional amounts. Also, the large amount of trading commissions 
should have raised a red flag to management. 

Additional reasons that contributed to the unauthorized positions going undetected 
included the inaction of Kerviel’s trading assistant to report fraudulent activity, the violation 
of the bank’s vacation policy, the weak reporting system for collateral and cash accounts, 
and the lack of investigation into unexpected reported trading gains. 

Kernels trading assistant had immediate access to Kernels trading activities. Because the 
fictitious trades and the manipulation of the bank’s trading system went unreported, it 
was believed that the trading assistant was acting in collusion with Kerviel. Regarding the 
bank’s vacation policy, the rule that forced traders to take two weeks of vacation in a row 
was ignored. Had this policy been enforced, another trader would have been responsible for 
Kerviel’s positions and likely would have uncovered the fraudulent activity of rolling fake 
transactions forward. Regarding collateral and cash reports, the fake transactions did not 
warrant any collateral or cash movements, so nothing balanced the collateral and cash needs 
of the actual trades that were being offset. If Societe Generale s collateral and cash reports 
had been more robust, it would have detected unauthorized movements in the levels of 
these accounts for each individual trader. Regarding reported trading gains, Kerviel inflated 
trading gains above levels that could be reasonably accounted for given his actual authorized 
trades. This action should have prompted management to investigate the source of the 
reported trading gains. 
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Ultimately, the unauthorized trading positions were discovered by chance after one of 

Kernels fake trades was detected by control personnel during a routine monitoring 

of positions. Kernels inability to explain the fictitious transaction led to a rigorous 

investigation, revealing the depth of his fraudulent activities. 

Lessons to be learned specific to this operational loss event include the following: 

• Traders who perform a large amount of trade cancellations should be flagged and, as a 
result, have a sample of their cancellations reviewed by validating details with trading 
counterparties to ensure cancellations are associated with real trades. 

• Tighter controls should be applied to situations that involve a new or temporary 
manager. 

• Ba n ks must check for abnormally high gross- to-net-position ratios. High ratios suggest 
a greater probability of unauthorized trading activities and/or basis risk measurement 
issues. 

• Control personnel should not assume the independence of a trading assistant’s actions. 
Trading assistants often work under extreme pressure and, thus, are susceptible to 
bullying tactics given that job performance depends on them following direction from 
traders. 

• Mandatory vacation rules should be enforced. 

• Requirements for collateral and cash reports must be monitored for individual traders. 

• Profit and loss activity that is outside reasonable expectations must be investigated 
by control personnel and management. Reported losses or gains can be compared to 
previous periods, forecasted values, or peer performance. 
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Key Concepts 



LO 41.1 

Operational risk departments look at events outside the firm to gain valuable insights 
and inputs into operational risk capital calculations. External events can also be useful in 
many areas of a firm’s operational risk framework, as they provide information useful for 
risk self-assessment activities. These events are key inputs in scenario analysis and can help 
in developing key risk indicators for monitoring the business environment. Additionally, 
external data is a required element in the advanced measurement approach (AMA) capital 
calculation. 

Subscription databases include descriptions and analyses of operational risk events, which 
are derived from legal and regulatory sources and news articles. In addition to database 
systems, there are also consortium-based risk event services that provide a central data 
repository to member firms and can offer benchmarking services as well. ORX is a provider 
of this type of data. 



LO 41.2 

When comparing data in the FIRST and ORX databases, we see significant differences 
between them. The FIRST database has a significantly higher percentage of losses for 
Internal Fraud than does ORX. In contrast, ORX has a significantly higher percent 
of Execution, Delivery, and Process Management losses. This could be because not all 
Execution, Delivery, and Process Management events are reported by the press, implying 
the FIRST database is missing many events and has an unavoidable collection bias. 

Another difference between the two databases with respect to Execution, Delivery, and 
Process Management events is that ORX data is supplied directly from member banks. 
However, not all hanks are ORX members, implying that ORX likely also suffers from 
collection bias. This is in contrast to the FIRST database that collects data on all firms, 
including a significant number of firms outside of Basel II compliance. 



LO 41.3 

ORX and FIRST databases must be viewed with caution, as there are several challenges 
with using external data. For example, external data derived from the media is subject 
to reporting bias because the press is far more likely to cover illegal and dramatic events. 
The use of benchmark data is also a concern, as there is a chance that comparisons are not 
accurate because of different interpretations of the underlying database definitions. 

One of the best ways to use external data is not to spot exact events to be avoided but 
rather to determine the types of errors and control failings necessary to avoid similar 
losses. External data can still have a valuable role in operational risk management if 
staff acknowledges any limitations. Databases can provide valuable lessons about risk 
management and highlight trends in the industry. 
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LO 41.4 

Jerome Kerviel, a junior trader at Societe Generale, participated in unauthorized trading 
activity and concealed this activity with fictitious offsetting transactions. The fraud resulted 
in €4.9 billion in losses and severely damaged the reputation of Societe Generale. 
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Concept Checkers 



1 . Which of the following reasons is least likely to be a motivation for firms to use 
external data? 

A. To provide inputs into operational risk calculations. 

B. To engage in risk self-assessment activities. 

C. To ignore any operational loss events outside of external loss databases. 

D. To use in the advanced measurement approach (AMA) capital calculation. 

2. In the IBM Algo FIRST database, which event type accounts for the most risk 
events? 

A. Business Disruptions and Systems Failures. 

B. Execution, Delivery, and Process Management. 

C. Clients, Products, and Business Practices. 

D. Internal Fraud. 

3. Which database is likely to suffer from selection bias for Execution, Delivery, and 
Process Management losses because not all events are reported in the press? 

I. IBM Algo FIRST 

II. Operational Riskdata eXchange Association (ORX) 

A. I only. 

B. II only. 

C. Both I and II. 

D. Neither I nor II. 

4. Which of the following statements is least likely to be a limitation of using external 
databases? External databases: 

A. must be viewed with caution. 

B. suffer from collection biases. 

C. do not report all events. 

D. cannot be used in internal calculations. 

5. Which of the following statements was not a contributing factor to Jerome Kernels 
activities at Societe Generale? Mr. Kerviel: 

A. engaged in extensive unauthorized activities. 

B. engaged in rogue trading despite being sufficiently supervised. 

C. had knowledge of controls to ensure his activities were not detected. 

D. gained password access to back office systems to manipulate data. 
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Concept Checker Answers 



1 . C Operational risk departments look at events outside the firm to gain valuable insights and 

inputs into operational risk capital calculations. Firms should understand that external loss 
databases only include a sample of potential operational loss events. 

2. C Forty six percent of all records in the FIRST database fall into the category of Clients, 

Products, and Business Practices, more than any other category. 

3. A Because not all Execution, Delivery, and Process Management events are reported by 

the press, it is likely that the FIRST database is missing many events and, thus, has an 
unavoidable collection bias. 

4. D The use of external databases is critical to firms’ operational risk management calculations, 

example of which is observing fat tail events at other firms. 

5. B Mr. Kerviel was insufficiently supervised according to IBM Algo FIRST. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Capital Modeling 



Topic 42 

Exam Focus 

This topic discusses approaches for modeling operational risk capital requirements. 

Collecting data for loss frequency and loss severity distributions is an important component 
of allocating operational risk capital among various bank business lines. The loss distribution 
approach (LDA) models losses with respect to both frequency and severity with the goal of 
determining the appropriate level of capital. For the exam, be able to compare the approaches 
for calculating operational risk capital charges and be able to describe the LDA for modeling 
capital. The LDA, as well as common frequency and severity distributions, are also addressed 
in the next topic (Topic 43). In addition, approaches for calculating operational risk capital 
requirements will be covered again in Topic 55 later in this book. 



Operational Risk Capital Requirements 



LO 42.1: Compare the basic indicator approach, the standardized approach and 
the alternative standardized approach for calculating the operational risk capital 
charge and calculate the Basel operational risk charge using each approach. 



Basel II proposed three approaches for determining the operational risk capital requirement 
(i.e., the amount of capital needed to protect against the possibility of operational risk 
losses). The basic indicator approach (BIA) and the standardized approach (TSA) 
determine capital requirements as a multiple of gross income at either the business line or 
institutional level. The advanced measurement approach (AMA) offers institutions the 
possibility to lower capital requirements in exchange for investing in risk assessment and 
management technologies. If a firm chooses to use the AMA, calculations will draw on the 
underlying elements illustrated in Figure 1 . 

Figure 1: Role of Capital Modeling in the Operational Risk Framework 
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Basel II encourages banks to develop more sophisticated operational risk management 
tools and expects international banks to use either the standardized approach or advanced 
measurement approach. In fact, many nations require large financial institutions to calculate 
operational risk with the AMA in order to be approved for Basel II. 



Basic Indicator Approach 



With the BIA, operational risk capital is based on 15% of the bank’s annual gross income 
(GI) over a three-year period. Gross income in this case includes both net interest income 
and noninterest income. The capital requirement, K BIA , under this approach is computed as 
follows: 



k BIA - 




where: 

GI - annual (positive) gross income over the previous three years 
n = number of years in which gross income was positive 
ol =15% (set by Basel Committee) 



Firms using this approach are still encouraged to adopt the risk management elements 
outlined in the Basel Committee on Banking Supervision, Risk Management Group, 
“Sound Practices for the Management and Supervision of Operational Risk. ” When a 
firm uses the BIA, it does not need loss data, risk and control self-assessment, scenario 
analysis, and business environment internal control factors (BEICF) for capital calculations. 
However, these data elements are needed as part of an operational risk framework to ensure 
risks are adequately identified, assessed, monitored, and mitigated. 



Example 1: Calculating BIA capital charge 

Assume Omega Bank has the following revenue results from the past three years: 





Year 1 


Year 2 


Year 3 


Annual Gross Revenue (in $ LOOM) 


25 


30 


35 



Calculate the operational risk capital requirement under the BIA. 



Answer: 

„ [(25 + 30 + 35) x 0.1 5] 

k bia — z = 4 -5 

D 

Thus, Omega Bank must hold $450 million in operational risk capital under Basel II 
using the basic indicator approach. 
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Example 2: Calculating BJA capital charge 

Assume Theta Bank has the following revenue results from the past three years: 





Year 1 


Year 2 


Year 3 


Annual Gross Revenue (in $1G0M) 


10 


-5 


15 



Calculate the operational risk capital requirement under the BIA. 

Answer: 

Because Year 2 is negative, it will not count toward the sum of gross income over the past 
three years. This will also reduce the value of n to two. 

Kbk = M± 1^] =i ^ 5 

Thus, Theta Bank must hold $ 187.5 million in operational risk capital under Basel II 
using the basic indicator approach. 



'ITie BIA for risk capital is simple to adopt, but it is an unreliable indication of the true 
capital needs of a firm because it uses only revenue as a driver. For example, if two firms had 
the same annual revenue over the last three years, but widely different risk controls, their 
capital requirements would be the same. Note also that operational risk capital requirements 
can be greatly affected by a single year’s extraordinary revenue when risk at the firm has not 
materially changed. 

The Standardized Approach 

For the standardized approach (TSA), the bank uses eight business lines with different beta 
factors to calculate the capital charge. With this approach, the beta factor of each business 
line is multiplied by the annual gross income amount over a three-year period. The results 
are then summed to arrive at the total operational risk capital charge under the standardized 
approach. The beta factors used in this approach are shown as follows: 

■ Investment banking (corporate finance): 18%. 

■ Investment banking (trading and sales): 18%. 

■ Retail banking: 12%. 

■ Commercial banking: 15%. 

■ Settlement and payment services: 18%. 

• Agency and custody services: 15%. 

■ Asset management: 12%. 

■ Retail brokerage: 12%. 

The standardized approach attempts to capture operational risk factors not covered by the 
BIA by assuming that different business activities carry different levels of operational risk. 
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Any negative capital charges from business lines can be offset up to a maximum of zero 
capital. The capital requirement, K TSA , under this approach is computed as follows: 



k TSA — 



X) max E^ GI l-8 X Pl— 8)>° 

3 Years 



where: 

GI X g = annual gross income in a given year for each of the eight business lines 
(3 l g = beta factors (fixed percentages for each business line) 

In the following examples. Gamma Bank has only three lines of business and uses the 
standardized approach for its operational risk capital calculation. 



Example 1: Calculating TSA capital charge 

Assume Gamma Bank has the following revenue (in $100M) for the past three years for 
its three lines of business: trading and sales, commercial banking, and asset management. 



Business Line 


Year 1 


Year 2 


Year 3 




Trading and Sales 


10 


15 


20 




Commercial Banking 


5 


10 


15 




Asset Management 


10 


10 


10 




Calculate the operational risk capital requirement under TSA. 




Answer: 










To calculate TSA capital charge, we first incorporate the relevant beta factors as follows 


Business Line 


Year 1 


Year 2 


Year 3 


Trading and Sales 


10 x 18% = 1.8 


15 x 18% = 2.7 


20 x 18% = 3.6 


Commercial Banking 


5 x 15% 


. = 0.75 


10 x 15% = 1.5 


15 x 15% = 2.25 


Asset Management 


10 x 12% = 1.2 


10 x 12% = 1.2 


10 x 12% = 1.2 


Total 


3.75 


5.4 


7.05 



Next, enter these totals into the capital charge calculation as follows: 

(3.75 + 5.4 + 7.05) 



k tsa — 



= 5.4 



Thus, Gamma Bank must hold $540 million in operational risk capital under Basel II 
using the standardized approach. 
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Example 2: Calculating TSA capital charge 

If Delta Bank has negative revenue in any business line, it can offset capital charges that 
year up to a maximum benefit of zero capital. Beta Bank has had the following revenue (in 
$100M) for the past three years for its two lines of business: corporate finance and retail 
banking. 



Business Line 


Year 1 


Year 2 


Year 3 


Corporate Finance 


5 


10 


15 


Retail Banking 


5 


-25 


5 


Calculate the operational risk capital requirement under TSA. 




Answer: 








Business Line 


Year 1 


Year 2 


Year 3 


Corporate Finance 


5 x 18% = 0.90 


10 x 18%= 1.80 


15 x 18% = 2.7 


Retail Banking 


5 x 12% = 0.60 


-25 x 12% = -3.0 


5 x 12% = 0.60 


Total 


1.5 


-1.2 


3.3 



Because a negative number cannot be used in the numerator, we replace —1.2 in Year 2 
with zero. However, unlike the BIA, the number of years remains at three. Entering these 
totals into the capital charge calculation yields: 



^ (1.5 + 0 + 3.3) _ , /f 

k TSA — I — 1(5 



Thus, Delta Bank would hold $160 million operational risk capital under Basel II using 
the standardized approach. 



Alternative Standardized Approach 

Under Basel II, a bank can be permitted to use the alternative standardized approach (ASA) 
provided it can demonstrate an ability to minimize double counting of certain risks. The 
ASA is identical to the standardized approach except for the calculation methodologies in 
the retail and commercial banking business lines. For these business lines, gross income 
is replaced with loans and advances times a multiplier, which is set equal to 0.035. Under 
the ASA, the beta factor for both retail and commercial banking is set to 15%. The capital 
requirement for the retail banking business line, Kj^, (which is the same for commercial 
banking) is computed as follows: 

Krb = Prb x LAj^ x m 
where: 

Prb = beta factor for retail banking business line (15%) 

LArjj - average total outstanding retail loans and advances over the past three years 
m = multiplier (0.035) 
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Unanticipated Results from Negative Gross Income 

The BIA and TSA capital charge methodologies can produce inappropriate results when 
accounting for negative gross income. For example, consider the following gross income 
amounts multiplied by the corresponding beta factors (in $100M): 



Business Line 


Year 1 


Year 2 


Year 3 


Corporate Finance 


X 
\ — 1 
00 
-p 

II 

o 

\D 


10 x 18%= 1.8 


-15 x 18% =-2.7 


Retail Banking 


5 x 12% - 0.6 


-25 x 12% = -3 


5 x 12% = 0.6 


Total 


1.5 


-1.2 


-2.1 



Under this scenario, the standardized approach will compute a capital charge of $50 m il lion 
as follows: 



k tsa — 



(1.5 + 0 + 0) 
3 



However, recall that the BIA applies a fixed 1 5% of gross income and reduces the value 
of n when negative gross income is present. Thus, under the same scenario, the BIA will 
compute a capital charge of $150 million as follows: 



k bia - 



[(5 + 5) X 0.15] 

1 



= 1.5 



Therefore, this bank would hold only $50 million in operational risk capital using TSA 
but $150 million under the BIA. The Basel Committee has recognized that capital under 
Pillar 1 (minimum capital requirements) may be distorted and, therefore, recommends 
that additional capital should be added under Pillar 2 (supervisory review) if negative gross 
income leads to unanticipated results. 



Advanced Measurement Approach 



LO 42.2: Describe the modeling requirements for a bank to use the Advanced 
Measurement Approach (AMA). 



The advanced measurement approach (AMA) allows banks to construct their own models 
for calculating operational risk capital. Although the Basel Committee allows significant 
flexibility in the use of the AMA, there are three main requirements. A bank must: 

• Demonstrate an ability to capture potentially severe “fat- tail” losses (banks must use 
99.9th percentile events with a one-year time horizon). 

• Include internal loss data, external loss data, scenario analysis, and business environment 
internal control factors (i.e., the four data elements). 

• Allocate capital in a way that incentivizes good behavior (i.e., create incentives to 
improve business line operational risk management). 

Under the AMA, capital requirements should be made for all seven risk categories specified 
by Basel II. Some firms calculate operational risk capital at the firm level and then allocate 
down to the business lines, while others calculate capital at the business line level. Capital 
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calculations are typically performed by constructing a business line/ event type matrix, where 
capital is allocated based on loss data for each matrix cell. 

Additional quantitative requirements under the AMA include: 

• The approach must capture all expected and unexpected losses and may only exclude 
expected losses under certain criteria as stated in Basel II. 

• The approach must provide sufficient detail to ensure that fat-tail events are captured. 

• The bank must sum all calculated cells in the business line/event type matrix and be able 
to defend any correlation assumptions made in its AMA model. 

• All four data elements must be included in the model, including the use of internal and 
external data, scenario analysis, and business environment factors. 

• The bank must use appropriate weights for the four data elements when determining 
operational risk capital. 

While the four data elements must be considered in the capital calculations, many banks 
use some of these elements only to allocate capital or perform stress tests, and then adjust 
their models, rather than using them as direct inputs into capital calculations. Regulators 
have accep ted many different types of AMA models, such as the loss distribution approach, 
given the rapid development of modeling operational risk capital. 



Loss Distribution Approach 



LO 42.3: Describe the loss distribution approach to modeling operational risk 
capital. 



The loss distribution approach (LDA) relies on internal losses as the basis of its design. 

A simple LDA model uses internal losses as direct inputs with the remaining three data 
elements being used for stressing or allocation purposes. However, according to Basel II, a 
bank must have at least five years of internal loss data regardless of its model design but can 
use three years of data when it first moves to the AMA. 

The advantage of the LDA is that it is based on historical data relevant to the firm. The 
disadvantage is that the data collection period is likely to be relatively short and may not 
capture fat-tail events. For example, no firm can produce 1,000 years of data, but the 
model is supposed to provide a 99-9% confidence level. Also, some firms find that they 
have insufficient loss data to build a model, even if they have more than five years of data. 
Additionally, banks need to keep in mind that historical data is not necessarily reflective of 
the future because firms change products, processes, and controls over time. 



LO 42.4: Explain how frequency and severity distributions of operational losses 
are obtained, including commonly used distributions and suitability guidelines for 
probability distributions. 



Modeling Frequency 

When developing a model of expected operational risk losses, the first step is to determine 
the likely frequency of events on an annual basis. The most common distribution for 
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modeling frequency is the Poisson distribution. This distribution uses only one parameter, 
X, which represents the average number of events in a given year, as well as the distributions 
mean and variance. In an LDA model, X can be obtained by observing the historical 
number of internal loss events per year and then calculating the average. 

The Poisson distribution represents the probability of a certain number of events occurring 
in a single year. As shown in Figure 2, lower values of X produce more skewed and 
leptokurtic annual loss distributions than higher values of X. 



Figure 2: Comparing Poisson Distributions 




Modeling Severity 



The next step in modeling expected operational risk losses is to determine the likely size 
(i.e., severity) of an event. The most common and least complex approach is to use a 
lognormal distribution. However, low frequency losses may be a better fit to distributions 
such as Generalized Gamma, Transformed Beta, Generalized Pareto, or Weibull. Regulators 
are interested in the selected distribution’s “goodness of fit.” 

Regardless of the distribution selected, the probability density function must exhibit fat 
tails. Events that are more than three standard deviations from the mean are more likely 
to occur than in a normal distribution; thus, the distribution will be skewed as seen in 
Figure 3. 
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Monte Carlo Simulation 



Severity of Loss 



LO 42.5: Explain how Monte Carlo simulation can he used to generate additional 
data points to estimate the 99 th percentile of an operational loss distribution. 



Once the frequency and severity distributions have been established, the next step is to 
combine them to generate data points that better estimate the capital required. This is done 
to ensure that likely losses for the next year will be covered at the 99-9% confidence level. 
Monte Carlo simulation can be used to combine frequency and severity distributions (a 
process known as convolution) in order to produce additional data points with the same 
characteristics as the observed data points. 

With this process, we make random draws from the loss frequency data and then draw those 
events from the loss severity data. Each combination of frequency and severity becomes 
a potential loss event in our loss distribution. This process is continued several thousand 
times to create the potential loss distribution. To find the 99.9% confidence level, with a 
million observations for example, we would select the 1,000th item in an ordered list (from 
largest to smallest loss) to represent the maximum loss that will be experienced in a single 
year with 99.9% certainty. 



Scenario Analysis 



LO 42.6: Explain the use of scenario analysis and the hybrid approach in modeling 
operational risk capital. 



Scenario analysis data is designed to identify fat-tail events, which is useful when 
calculating the appropriate amount of operational risk capital. The advantage of using 
scenario analysis is that data reflects the future through a process designed to consider “what 
if” scenarios, in contrast to the LDA which only considers the past. The major disadvantage 
of scenario analysis is that the data is highly subjective, and it only produces a few data 
points. As a result, complex techniques must be applied to model the full loss distribution, 
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as the lack of data output in scenario analysis can make the fitting of distributions difficult. 
In addition, small changes in assumptions can lead to widely different results. 

There are many different approaches to scenario analysis, but whichever method is used, 
a scarcity of data points is likely. This makes pure scenario analysis a difficult approach to 
defend in estimating risk capital. Also, the more reliance there is on scenario analysis, the 
more robust the program must be because sometimes there is little or no loss data av ai lable 
and a model may need to rely purely on scenario analysis for a particular risk category. 
Consequently, it is acceptable to have different modeling techniques for various risk 
categories as long as the differences are justified. While some scenario-based models have 
been approved in Europe, U.S. regulators generally do not accept them. 

In the hybrid approach, loss data and scenario analysis output are both used to calculate 
operational risk capital. Some firms combine the LDA and scenario analysis by stitching 
together two distributions. For example, the LDA may be used to model expected losses, 
and scenario analysis may be used to model unexpected losses. Another approach combines 
scenario analysis data points with actual loss data when developing frequency and severity 
distributions. 



Insurance 



LO 42.7: Describe the AMA guidelines for the use of insurance in reducing a 
banks operational risk capital charge. 



Ba nks have the option to insure against the occurrence of operational risks. The important 
considerations are how much insurance to buy and which operational risks to insure. 
Insurance companies offer polices on everything from losses related to fire to losses 
related to a rogue trader. A bank using the AMA for calculating operational risk capital 
requirements can use insurance to reduce its capital charge. However, the recognition of 
insurance mitigation is limited to 20% of the total operational risk capital required. 

The LDA allows for a risk profiling of an institution, which can include the risk reducing 
effect of insurance, which then alters the aggregate loss distribution. Typically this is done 
by reducing the severity of the losses that exceed a given deductible in the insurance policy. 
In other words, insurance typically lowers the severity but not the frequency. 

Operational risk capital may need to be billions of dollars, so it can be worthwhile to 
pursue insurance as a means to reduce the amount of capital needed. Insurance companies 
are attempting to accommodate industry needs through new insurance products that meet 
Basel requirements. 
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Key Concepts 



LO 42.1 

The three methods for calculating operational risk capital requirements are (1) the basic 
indicator approach (BIA), (2) the standardized approach (TSA), and (3) the advanced 
measurement approach (AMA). Large banks are encouraged to move from TSA to the AMA 
in an effort to reduce capital requirements. 



LO 42.2 

The first requirement to use the AMA is that the model must hold sufficient capital to cover 
all operational risk losses for one year with a certainty of 99.9%. The second requirement 
is that internal loss data, external loss data, scenario analysis, and business environment 
internal control factors must be included in the model. The third requirement is that there 
must be a method for allocating capital that incentivizes good behavior. 



LO 42.3 

The loss distribution approach (LDA) relies on internal losses as the basis of its design. 

It uses internal losses as direct inputs, with the remaining data elements being used for 
stressing or allocation purposes. However, regardless of its model design, a bank must have 
at least three years of loss data. The advantage of the LDA model is that it is based on 
historical data relevant to the firm. The disadvantage is that the data collection period is 
likely to be relatively short and may not capture all fat- tail events. 



LO 42.4 

When developing a model of expected operational risk losses, the first step is to determine 
the likely frequency of events on an annual basis. The most popular distribution for 
modeling frequency is the Poisson distribution. In a Poisson distribution, there is only one 
parameter, \, which represents the average number of events in a given year. The next step 
in modeling expected operational risk losses is to determine the severity of an event. The 
most common and least complex distribution is to use a lognormal distribution. 



LO 42.5 

Once the frequency and severity distributions have been established, the next step is 
to use them to generate data points to better estimate the capital required at a 99.9% 
confidence level. Monte Carlo simulation is a method for combining frequency and 
severity distributions to produce additional data points that have the same characteristics as 
observed data points. 



LO 42.6 

Scenario analysis data is designed to identify fat- tail events and is useful in calculating 
the appropriate amount of operational risk capital. In the hybrid approach, loss data and 
scenario analysis output are both used to calculate operational risk capital. 



©2015 Kaplan, Inc. 



Page 65 





Topic 42 

Cross Reference to GARP Assigned Reading — Girling, Chapter 12 



LO 42.7 

Insurance alters the aggregate loss distribution and, when insurance is used, it should be 
included in LDA models. Insurance typically lowers the severity but not the frequency of 
losses. 
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Concept Checkers 



1 . Under the basic indicator approach (BIA), what is Alpha Banks capital charge if 
it has revenues of $100 million, $150 million, and $200 m il l i on in the first three 
years? 

A. $22.0 million. 

B. $22.5 million. 

C. $23.0 million. 

D. $23.5 million. 

2. Which of the following statements is not a requirement to apply the advanced 
measurement approach (AMA)? 

A. The model must hold capital to cover all operational risk losses for one year with 
a certainty of 99.9%. 

B. Internal loss data, external loss data, scenario analysis, and business environment 
internal control factors must be included in the model. 

C. Capital must be allocated to minimize risk. 

D. There must be a method for allocating capital that incentivizes good behavior. 

3. Which of the following reasons is not a disadvantage of the loss distribution 
approach (LDA) to modeling operational risk capital requirements? 

A. The LDA is based on historical data. 

B. Most firms have limited historical data. 

C. Fat-tail events may not be captured by modeling. 

D. Historical data is not reflective of the future. 

4. When modeling risk frequency, it is common to: 

A. use a Poisson distribution. 

B. assume that risks are highly correlated. 

C. assume risk frequency and severity are the same. 

D. use a straight-line projection from the most recent loss data. 

5. Extreme losses in the tail of the operational risk loss distribution most likely follow 
which type of process/distribution? 

A. Generalized Pareto distribution. 

B. Historical simulation method. 

C. Poisson distribution. 

D. Extreme value theory. 



©2015 Kaplan, Inc. 



Page 67 





Topic 42 

Cross Reference to GARP Assigned Reading — Girling, Chapter 12 



Concept Checker Answers 



1. B The BIA is based on 15% of the banks annual gross income over a three-year period and is 

computed as follows: 

K B1A = [ (100+150 + 20 °) X0 - 15 ] ^$22.5 million 
3 

2. C There is no specific requirement under the AMA to minimize risk. 

3. A An advantage of the LDA model is that it is based on historical data relevant to the firm. 

4. A It is common to use a Poisson distribution to model loss frequency. A Poisson distribution 

has a single parameter, X, which can be varied to accurately describe loss data. 

5. A The most common and least complex approach for modeling extreme losses is to use a 

lognormal distribution. However, low frequency losses may be a better fit to distributions 
such as Generalized Gamma, Transformed Beta, Generalized Pareto, or Weibull. 
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Topic 43 



Exam Focus 

This topic is an extension of Topic 38 , providing more specific guidelines from the Basel 
Committee on Banking Supervision regarding operational risk measurement, specifically 
the advanced measurement approach (AMA). The AMA allows han ks substantial flexibility 
in developing operational risk measurement and management systems. The Committee 
would like to see sufficient consistency in the application of this approach. For the exam, 
understand guidelines for verification and validation of a banks operational risk management 
framework (ORMF) and its operational risk management system (ORMS). Also, be 
familiar with the key guidelines for selecting operational risk categories (ORCs) and how 
the distribution for individual ORCs is modeled. Finally, understand the application of 
frequency and severity distributions when modeling operational risk losses. 



Advanced Measurement Approach (AMA) 

In an effort to further strengthen the soundness and stability of the international banking 
system, the Basel Committee on Banking Supervision developed the Basel II framework. 
One of the goals of Basel II is to give guidance to ba n ks regarding operational risk 
management. Basel II recommends a measurement framework that meets the requirements 
of the advanced measurement approach (AMA). The Basel Committee also formed the 
Standards Implementation Group, and its Operational Risk Subgroup (SIGOR) focuses 
on the challenges of identifying and managing operational risk. The SIGOR resolves the 
practical challenges associated with the development, implementation, and maintenance of 
the AMA framework. 

The AMA allows banks to develop empirical models to quantify the capital required for 
operational risks. Banks must be approved by regulators (i.e., supervisory authorities) 
to use the approach and must convince regulators that the board of directors and senior 
management are actively engaged in the oversight of operational risks. The AMA is flexible 
and modeling reflects individual bank risk profiles. However, the committee does not want 
banks with similar risk profiles to have different levels of required capital. This can happen 
if banks rely on very different risk assumptions and approaches to modeling operational 
risks. As such, they offer substantial guidance (presented in this topic) to help banks 
converge around common risk management practices while still allowing for individual 
flexibility. 
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Operational Risk Measurement and Management 



LO 43.1 : Summarize key guidelines for verification and validation of a banks 
operational risk management framework (ORMF) and its operational risk 
management system (ORMS), including the use test and experience. 



The operational risk management framework (ORMF) is the umbrella under which 
all operational risk management operations fall. Recall that the ORMF was called 
the “Framework” in Topic 38. According to the Basel Committee, sound internal 
governance forms the foundation of an effective ORMF. Topic 38 indicated that business 
line management, an independent corporate operational risk function (CORF), and 
independent review (i.e., the three lines of defense) are also necessary for an effective 
ORMF. 

The operational risk measurement system (ORMS) includes all the factors that are 
components of risk measurement and modeling systems used to estimate operational risk 
capital charges. That is: 

• Statistical methodologies. 

• Bank policies regarding risk identification, measurement, and management. 

• Bank processes regarding risk identification, measurement, and management. 

• Internal governance. 

• Bank systems, data, and AMA capital allocation outcomes. 

• Validation to ensure that the ORMS is robust. 

• Verification to test the effectiveness of the overall ORMF. 

Figure 1: Relationship Between ORMF and ORMS 
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Validation and Verification 

Validation and verification are fundamental components of the AMA. They are effective 
challenge functions that assess the reliability of the ORMF and identify areas for 
improvement. These activities are concerned with both the quantitative and qualitative 
processes of the bank. Senior managers and the board of directors should use validation and 
verification activities to better understand and manage operational risks and the ORMF. 
Validation and verification processes should provide independent assessments (i.e., should 
not be improperly influenced by divisions that are being reviewed and should be willing to 
challenge management’s views). 

There are, according to the committee, subtle differences between validation and 
verification. They are described as: 

• Validation provides assurance of the integrity of the inputs in AMA operational 
risk capital models, the assumptions used in the models, bank processes, and model 
outputs. Validation allows the bank a degree of certainty that AMA measurement 
methodologies result in credible estimates of operational risk capital. The capital charge 
must be commensurate with the risk exposure of the bank. Validation activities test the 
robustness and effectiveness of the ORMS but are not limited to quantitative aspects. 

For example, the use of outputs in operational risk models must also be validated. 

• Verification is conducted by internal and/or external audits and may be conducted by 
qualified third parties. It is done on a periodic basis. Verification is concerned with the 
overall effectiveness of the ORMF. ORMS validation processes must be verified as well 
(e.g., is validation of inputs and models independent?). 

There are challenges with respect to validation and verification. They include: 

1 . The board of directors and senior managers must identify independent (i.e., cannot 
influence the operation of the AMA framework), qualified personnel who are skilled, 
competent, and appropriately trained. 

2. Conventional validation procedures may be inadequate for the validation of AMA 
models (e.g., a lack of independence, overlapping responsibilities, and fragmented 
responsibilities for the development and implementation of AMA models). 

3. Operational loss data continues to be scarce. Also, AMA models are still in the 
development phase as banks adopt this new system of estimating operational risk 
capital. 

The bank must verify that the ORMF has been implemented effectively, is performing as 
intended, and is still appropriate for the bank’s operational risk management. Guidelines for 
verification of the ORMF state that verification activities should ensure that: 

• Operational risk management policies and procedures are transparent, sound, and 
documented. 

• The CORF, business unit functions, and operational risk management governance 
committees and processes are appropriate for risk management. 

• Model inputs and outputs are accurate, complete, relevant, credible, authorized by 
appropriate personnel, and accessible. 

• Monitoring of risk management processes is effective. 

• Remediation and improvements are made if identified and/or necessary. 
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• Outcome analysis is effective, includes proper comparisons (e.g., between loss data and 
scenario analysis results), and is incorporated into bank processes. 

• Validation of AMA models is completed in accordance with bank validation policies. 

• Tests of operational risk management controls are designed properly and prevent, detect, 
and correct deviations from bank policies and procedures. 

• All aspects (divisions, activities, and subsidiaries) of the bank are included. 

• The AMA framework is subject to periodic, independent review. 

In general, validation processes should (1) be broad in scope, (2) evaluate the banks 
escalation processes when concerns are identified (e.g., all ORMS concerns are acted 
upon by senior management or the board and concerns are escalated to the appropriate 
governance committees), (3) evaluate the conceptual soundness of model outputs, (4) be 
consistent with board of directors and senior managers’ expectations, (5) assess whether 
independent review, defined responsibilities, model validation and documentation, 
frequency of validation procedures, and audit oversight is in place, and (6) verify that 
model inputs and outputs are stable and that methods underlying models are intuitive and 
transparent. 

Guidelines for validation of the ORMS state that validation activities should be broad in 
scope and evaluate all relevant matter of the ORMS, including: 

• Assumptions regarding correlations and distributions. 

• Documentation of assumptions regarding correlations, distributions, and other inputs. 

• The four AMA data elements (discussed in LO 43.7). 

• Qualitative factors such as internal controls, reporting, and the role of senior 
management in the risk management process. 

• Technological infrastructure relating to computational processes. 

• Required procedures for approval of new or modified estimation models or 
methodologies (in the approval process, the explicit opinion of the validation function 
should be sought). 

With respect to validation and verification, the committee recommends: 

• A work plan or strategic plan that governs the verification and validation processes 
including detailed annual plans. 

• Documentation and reporting. Validation and verification reports should be distributed 
to managers and appropriate committees. Responsible personnel should have access 

to the reports and should understand the reports. Reports should identify weaknesses 
and include processes needed to resolve problem areas and audits should evaluate 
management’s response to important reported deficiencies. The reports should be 
summarized for the bank’s board of directors. 

As a bank gains more experience with measuring and managing operational risk, its ORMF 
should evolve and be updated regularly. Banks also need to ensure that the degree of ORMF 
implementation (or embeddedness) across the organization is not influenced by changes 
within the bank. When a bank’s operational risk discipline changes, it is important to 
increase embeddedness by clearly communicating the bank’s operational risk profile and the 
bank’s operational risk appetite and tolerance. It is also important to ensure that the ORMF 
is properly used during overall risk management decision-making processes. Regarding the 
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use and embeddedness of the OMRF, the ORMS, and the AMA framework, a bank should 
incorporate the following guidelines: 

• The AMA should be used throughout the organization and not be solely reserved for 
compliance purposes. 

• Changing risk management practices should be reflected in the AMA as a bank gains 
experience. 

• The AMA should be used to support operational risk management practices and policies. 

• The AMA should be used to benefit a banks management of operational risk. 

Data Elements in an AMA Framework 



LO 43-7: Describe the four required data elements in an AMA model and the 
guidelines for combining data from each element in modeling the capital charge. 



The Basel Committee requires four data elements that a bank must use to calculate the 
operational risk capital charge based on the AMA framework. The elements must be used in 
different “combinations” and the bank must prove that the combinations are sufficient for 
successful model estimations. The four data elements are: 

1 . Internal loss data. Loss data used in the AMA model should reflect both the bank’s risk 
profile and risk management systems. Data is used in the operational risk measurement 
system (ORMS) to estimate the frequency of losses and severity distributions and as an 
input in scenario analysis. 

2. External loss data. External data contains valuable information regarding the tail of the 
loss distribution(s). External data helps the bank estimate the severity of losses. Public 
databases can provide external data where members submit loss information or they can 
collect pertinent external data themselves. 

3. Scenario analysis. Reliable scenario outputs form part of the input into the AMA 
model. Scenario analysis is an important tool in the operational risk management 
framework (ORMF). Scenario analysis is, however, qualitative and likely contains 
considerable uncertainties. The uncertainty (along with other non-scenario analysis- 
related uncertainties) should be reflected in the output of the model estimating the 
operational risk capital charge although quantifying these uncertainties is a major 
challenge. The committee indicates that this is an area requiring further research. 

4. Business environment and internal control factors (BEICFs). BEICFs are subjective 
and are often used as indirect inputs in models or are used ex post to adjust a models 
output. 

The goal of operational risk models (and the data used in the models) is to ensure the 
bank’s operational risk capital is commensurate with the bank’s operational risk exposure. 
Banks must be able to justify assumptions and modeling choices. Also, banks must conduct 
research and analysis that supports their modeling decisions. 
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Internal Loss Data Threshold 

Bank supervisors require an internal loss data threshold. The threshold influences both the 
measurement and management of operational risk. The bank should be able to (ideally) 
establish, using statistical evidence, that losses below the threshold level have an immaterial 
effect on capital calculations. Banks should be aware that thresholds affect capital. 

Internal loss data thresholds should: 

• Be defined and justified for each operational risk category (for data collection and 
modeling). 

• Be reasonable and include material operational loss event data that is relevant for 
measuring and managing operational risk (i.e., does not omit relevant loss data). 

• Support the credibility and accuracy of operational risk measures (i.e., should not 
adversely impact the integrity and accuracy of risk measures). 

Losses should be grouped for quantification purposes only if they are caused by a common 
operational loss event. If a bank combines small losses that are not related, they should 
generally be excluded from the calculation dataset or at least show that the grouped losses 
do not distort the calculation of capital. 

De minimis “modeling thresholds” may be established for operational risk categories 
(ORCs). This is established so frequency and severity distributions in each ORC are fitted 
to data above the de minimis threshold. If a bank sets de minimis levels higher than data 
collection thresholds, the bank must justify the levels using sensitivity analysis and other 
tools. Losses above the de minimis threshold should be included in the calculation dataset. 

Selecting Internal Loss Reference Dates 

There are several relevant dates related to loss (i.e., dates that have relevant information 
regarding the operational loss), including the date of the event’s occurrence, the date of 
discovery, the date of contingent liability, the date of the first financial impact, and the date 
of the settlement. A bank may choose one reference date for risk management and another 
for quantification purposes. The quantification date is critical because in the Basel II 
framework it is used to fulfill the minimum observation period. 

A concern is that AMA banks might choose a reference date for quantification that will 
result in the omission of large internal losses. This affects the bank’s operational risk capital 
charge. The Basel Committee recommends a convergence of practice in how losses are 
recorded so there will not be differences in capital requirements for similar risk events. 

The Basel guidelines are meant to encourage consistency across banks’ AMA models. The 
Committee would also like to see more harmony to AMA implementation for building a 
calculation dataset. Three reference dates are typically most important. They are as follows: 
(1) date of occurrence, (2) date of discovery, and (3) accounting date. 

The accounting date and discovery dates are the best dates for building the operational risk 
dataset that is used to calculate operational risk capital related to the event. The date of 
occurrence can be used but may result in some material losses being excluded if the date of 
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occurrence falls outside the time series used to estimate the capital charge. The bottom line 
is that a bank should choose an observation period that does not exclude material loss data. 

The bank should also be conservative when considering inputs into the AMA model 
related to the recognition of legal losses. The date should be no later than the date for 
the establishment of a legal reserve. Scenario analysis can also be used to estimate legal 
exposures because legal exposure can change over time. 



Loss Distribution Approach 



LO 43.3: Describe commonly used distributions used to model the frequency and 
severity of a banks operational loss events. 



One of the approved alternatives under the Basel II AMA framework to quantifying 
operational risk is called the loss distribution approach (LDA). Under the LDA, capital 
requirements are determined based on the historical losses suffered by the institution. The 
Basel Committee defines LDA as an estimate of the loss distribution resulting from each 
business line and event type of operational risk. The distribution is constructed based on 
assumptions of loss frequency and loss severity, which primarily come from the historical 
loss experience of the institution. 

The loss distribution approach has several steps as follows: 

Step 1: Organize and group loss data into a business line/ event type matrix that 

corresponds to the LDA model. The evaluation of loss data allows a bank to 
understand its exposure to operational risk. Note that loss data is “backward- 
looking.” 




Professor’s Note: Recall the discussion of business lines and event types in Topics 
40 and 41. Examples of business lines include corporate finance, retail banking, 
commercial banking, and asset management. Examples of event types are 
operational risks, such as internal and external fraud, and clients, products, and 
business practices. 



Step 2: Assign every data point in the matrix an equal weight (except for split losses, old 
losses, and external losses and scenarios). 

Step 3: Model an operational risk loss distribution in each cell of the business line/event 
type matrix using an actuarial approach. This involves deriving one distribution 
for event frequency and one distribution for severity from loss data and then 
combining them using Monte Carlo simulation. 

Step 4: Determine the operating risk capital requirements for each business line by 
combining empirical distributions and parametric tail distributions. 



The overall operational risk capital requirement for the firm would combine the results 
in each of the cells from the business line/event type matrix in such a way that takes into 
account that losses would not be perfectly correlated (i.e., diversification). 
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Frequency Distributions 

As mentioned, LDA models have two dimensions, frequency of loss and severity of loss. 
Each is modeled separately. With respect to frequency, LDA models most often use the 
Poisson distribution, the negative binomial distribution, or the binomial distribution. 
Some practitioners suggest only using internal data because it is most relevant, and it 
is difficult to ensure the completeness of external data. Also, modeling the frequency 
distribution requires less data when compared to modeling the severity. When using 
external loss data in the frequency calibration, the external frequency data has to be scaled. 

The calibration process for the frequency distributions uses a time series of internal 
frequency data in each cell and separates frequency data into monthly buckets in order to 
ensure that the number of data points is sufficient for a statistical analysis. The goal is to 
choose the appropriate distribution (e.g., Poisson distribution). This is done by comparing 
the mean and variance and applying a goodness-of-fit test such as a chi-squared test. The 
chosen distribution should be the one that most closely fits the hypothetical distribution. 

Another way to determine the proper distribution analyzes the interarrival time of losses. 
Assuming the loss events follow a Poisson distribution, the interarrival times between 
the events follow an exponential distribution, and the data is fit to that distribution. A 
chi-squared test then assesses the quality of the fit. Firms have generally used the Poisson 
distribution over the binomial distribution to fit frequency distributions. 

Severity Distributions 

Loss severity is often modeled with a lognormal distribution. This distribution is 
asymmetrical (i.e., the frequency of high-impact, low-frequency losses is not equal to the 
frequency of low-impact, high-frequency losses) and fat-tailed (i.e., rare events occur more 
often than would be indicated by a normal distribution). The mean and standard deviation 
are derived from the logarithm of losses. 

The severity distributions are generally considered more important than the frequency 
distributions. There are some practical considerations that make modeling severity more 
difficult. One problem is that recent internal loss data (five to seven years) may not be 
sufficient for calibrating tails of severity distributions. Using external data usually requires 
scaling the data and combining data from several sources. 

Furthermore, for a more complete model of possible losses, the analyst should extrapolate 
the observed losses to estimate values beyond those observed. The common approach is to 
fit the losses to a parametric distribution that allows for values beyond those observed and 
use that distribution to extrapolate the additional values. The goal is to get values “in the 
tail” of the distribution. Choosing the distribution is a non-trivial task, which can have a 
significant impact on the models results. Analysts have found that it may be best to separate 
the distribution and model the body and the tail separately (i.e., extreme value theory), 
which obviously adds complexity. 

Another practical consideration is to recognize that the analysts ultimate goal is to 
determine the operational risk capital reserve (or charge), and extrapolations could lead to 
the inclusion of extremely severe hypothetical losses and an overestimation of the needed 
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capital reserve. Finally, in developing the process, the analyst must consider how she will 
communicate it to colleagues and managers in other departments. 

Dependencies in LDA Models 

To this point, we have assumed that losses in cells are independent and that the estimated 
frequency and severity distributions, modeled separately, are independent. There are several 
types of dependencies that can affect the true probability of loss and the economic capital 
of the bank. There can be within-cell dependencies, which include the dependence between 
the following: 

• The occurrence of loss events. 

• The frequency distribution and the severity distribution. 

• Severity samples in a cell. 

It may also be possible to have between-cell dependencies. The statistical evidence supports 
the assumption that the frequency and severity distributions in a cell are independent and 
the severity samples are independent. Furthermore, the regulatory focus is on modeling 
dependencies between cells, that is, between different business lines/event types. The choices 
in modeling these dependencies are (1) the level of the dependencies (i.e., frequencies, 
severities, or loss distributions) and (2) the appropriate mathematical models. 

In practice, for various reasons, the focus is further narrowed to the dependencies of 
frequency distributions. Copula functions can model the dependency of frequency 
distributions and, for simplicity, Gaussian copulas are often used. To take into account 
the uncertainty regarding the correct copula family, the correlation estimates are chosen 
conservatively. It has been found that the correlations between the frequencies are 
significant only between specific subsets of cells, but are still rather low. 



Aggregate Loss Distribution 



LO 43.5: Describe techniques used to get an aggregated loss distribution from 
frequency and severity distributions. 



Through a process called convolution, the frequency and severity distributions can be 
combined into a single operational loss distribution. Constructing the loss distribution 
for the entire institution is accomplished through Monte Carlo simulation across the 
loss frequency and severity data, beginning with each loss type in each business line, and 
then aggregating across all business lines/event types. With this single operational loss 
distribution, a bank can then identify the mean annual loss and the loss at any given 
confidence level, and determine the amount of capital required to support the potential 
operational risk. Note that while it is unlikely that losses are perfectly correlated, it may 
be unreasonable to assume no correlation. Therefore, analysis of the correlations between 
business line/ event type data may be required. 

Once the loss distribution (that combines severity and frequency) is constructed, we can 
examine the difference between the operational value at risk (OpVaR) measure and expected 
loss to determine the amount of capital needed to cover potential operational risk losses 
(i.e., unexpected losses). 
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Selecting Operational Risk Categories 



LO 43.2: Describe key guidelines for the selection of a banks Operational Risk 
Categories (ORCs). 



Operational risks are quite diverse, ranging from losses that result from natural disasters 
to fraud committed by employees. As a result, banks categorize operational risks based 
on similar characteristics (i.e., event types). The capital charge is significantly influenced 
by the number of operational risk categories (ORCs) the bank chooses. There is sizeable 
variation between ba n ks regarding the number of ORCs. The Basel Committee guides 
banks toward comparable standards when selecting ORCs for operational risk modeling. 
The committee also requires that an AMA banks risk measurement system must be granular 
enough to capture the drivers of operational risk that impact the shape of the tail in the loss 
distribution. 

Supervisory guidelines regarding ORCs include: 

• Ba n ks should consider both the complexities and the idiosyncrasies (e.g., risk profile, 
history of operational losses, business profile, business environment, and so on) of 
the bank’s operations when modeling operational risks. Banks should characterize 
operational risks (i.e., choose ORCs) along these factors. Risks that share common 
factors should be grouped together. 

• Granularity must remain valid in the face of significant changes to the bank or the bank’s 
risk profile. 

• Very low and very high numbers of ORCs are both problematic, especially when used 
in conjunction with a loss distribution approach (LDA). When a bank uses only one 
or a few categories, granularity is lost. However, when a bank uses a very high number 
of ORCs, the number of losses in each category is likely to fall below the model’s 
data threshold. The importance of the bank’s business lines may be one factor used to 
determine the level of granularity (i.e., the number of ORCs). 

• The bank should provide evidence to supervisory authorities that the choice of ORCs is 
reasonable and does not adversely impact other risk model factors such as correlations, 
diversification assumptions, and capital allocation. 

• The bank should support the reasonableness of the number of ORCs, particularly 
with respect to the impact on operational risk capital charges. Both quantitative and 
qualitative methods should be used to support the choice of granularity. For example, for 
the event type External Fraud, there are the “business as usual” type frauds that are small 
and somewhat frequent (e.g., petty theft and robbery) and large, unusual fraudulent 
activities (e.g., Ponzi schemes). The External Fraud category should be split into 
subcategories to reflect the two very different types of fraud. 

• A high number of ORCs may lead to an unrealistically high capital charge if no 
correlations are modeled and capital charges for all ORCs are summed. On the other 
hand, it may be difficult for a bank to validate correlation assumptions due to minimal 
loss data for a large number of ORCs. Banks must mitigate these issues by choosing the 
appropriate number of ORCs. 

• When choosing ORCs, the bank should consider the capital allocation to internal 
business lines. Changes in the ORCs do not necessarily have to correspond to changes 
in the capital allocation method. Changes in business units that do not affect the risk 
profile of the bank do not have to result in changes to the ORCs. However, these 
changes will have to be incorporated in the capital allocation process. 
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Modeling ORC Distributions 



LO 43.4: Explain key guidelines for modeling the distribution of individual ORCs, 
including the selection of thresholds, necessary adjustments, and selection of 
statistical tools and probability distributions. 



According to the committee, the basis of all operational risk models is a distribution of 
risk losses. Most banks model the severity and frequency distributions separately. The 
distributions are fitted to the calculation dataset that fulfills the requirements to serve 
as inputs in the AMA operational risk model. The bank must demonstrate that the 
distributional assumptions capture potentially severe “tail” loss events. 

As mentioned earlier, the most common frequency distribution used by banks is the 
Poisson distribution. Banks may assume that losses follow similar or different paths. For 
example, high frequency low impact events (HFLI) (i.e., the body of the distribution) may 
follow a different path than low frequency high impact events (LFHI) (i.e., the tail of the 
distribution). In fact, 50 % of AMA banks apply two separate distributions for the body 
and the tail data. Banks also differ in their choices of modeling thresholds and the methods 
they use to estimate the distribution parameters. Ultimately these differences result in the 
variations across banks in the calculations of operational risk capital requirements. 

Supervisory guidelines regarding the building of the calculation dataset include: 

• There should be a policy that identifies when a loss that is recorded in the internal or 
external loss event database is also included in the calculation dataset. 

• The observation period, reference date, de minimis modeling thresholds, data treatment, 
and so on must be addressed as the bank builds a proper calculation dataset. 

• Low frequency events (e.g., Ponzi scheme) may require five years or more of data 
collection to generate reliable operational risk measures and ensure that all material losses 
are included in the calculation dataset. 

• The bank should not use losses net of insurance recoveries in AMA models. 

Supervisory guidelines regarding probability distributions include: 

• The choice of distributions related to severity is critical to AMA models. Medium/heavy- 
tailed distributions are frequently used. The choice of the frequency distribution is less 
important to the final outcome than the choice of the severity distribution. 

• Probability distributions must be consistent with all of the elements of the AMA model, 
realistic (i.e., realistic capital requirement estimates result), well specified (characteristics 
of the fitted data are similar to the loss data), flexible (accommodates a wide variety of 
empirical data), and simple (easy to implement and generate random numbers for loss 
simulations). 

• The bank should document and be able to verify the choice of a distribution. The bank 
should undertake exploratory data analysis (EDA) for each ORC in order to understand 
the statistical profile of the data. This allows (or at least assists) the bank to choose an 
appropriate distribution. The bank should also use appropriate techniques and diagnostic 
tools to evaluate distributions. Preference should be given to distributions that are most 
sensitive to the tail. 
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• Banks should use statistical tools that examine the statistical properties of each ORC 
(i.e., homogeneity, independence, and stationarity). Tools may include scatter plots, time 
series autocorrelation plots, regression analysis, histograms, and empirical distribution 
plots. Mean excess plots, p-p plots, and q-q plots provide evidence of the type and shape 
of the probability distributions. 

• Data from a severity perspective (as opposed to a frequency perspective) illustrate 
positive skewness and medium/heavy tailedness (i.e., exhibits leptokurtosis). Due to 
the dispersion of the data, the higher moments of the distribution (standard deviation, 
skewness, and kurtosis) are calculable but likely very large. The bank should not use 
empirical curves to estimate the tail region because it is impossible to extrapolate 
information beyond the last observable data point. The use of sub-exponential 
distributions (e.g., lognormal, lognormal-gamma, log-gamma, generalized Pareto, Burr, 
Weibull with shape parameter < 1) is highly recommended by the committee. 

• When two distributions are used (i.e., for the body and tail), the bank should carefully 
choose the body-tail modeling threshold that distinguishes the two areas. 

• Data is scarce and estimates of kurtosis-related parameters (which describe the tail region 
of the losses) can be highly unstable. The bank should use methodologies that reduce 
estimate variability and should provide measures of errors around the estimates such as 
confidence intervals and ^-values. 

• Robust estimation methods should be used, making certain that methodologies do not 
underestimate tail risk. 

• The bank should use tools such as goodness-of-fit tests and graphical methods to assess 
the quality of the fit between the distribution selected by the bank and the banks 
operational risk loss data. Goodness-of-fit tests that are more sensitive to the tail should 
be used (e.g., the Anderson-Darling upper tail test). 

• Goodness-of-fit tests are sensitive to sample size and the number of parameters 
estimated. Thus, the tests do not always indicate the best fitting distribution. Alternative 
methods that use relative performance of the distributions at different confidence 
intervals such as the Likelihood Ratio, the Schwarz Bayesian Criterion, and the Violation 
Ratio may be preferable. 

Within an ORC, losses should be independent of each other. There is a tradeoff between 

rigor and conservatism. Banks should be more conservative when using dependence 

assumptions that are less rigorous. However, supervisory authorities will not accept 

conservatism in place of sound assumptions. 
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Modeling Dependence 



LO 43.6: Explain supervisory guidelines for modeling dependence and correlation 
effects between operational risk factors across different operational risk categories. 



Multiple business lines within a bank have exposure to shared policies, structural factors 
(e.g., IT systems), and environmental factors (e.g., legal risk). These factors give rise to 
operational risk dependence, and will likely impacted loss frequency and loss severity 
throughout the bank. There are several approaches for modeling dependence and 
correlation effects; however, the choice of approach will play a major role in a banks 
operational risk capital requirements. Thus, it is important to ensure that the analysis of 
dependence is not impacted by any spurious exposure differences. 

Supervisory guidelines regarding dependence and correlation effects include: 

• Historical data and expert opinion should be combined to support dependence 
assumptions. Data limitations may arise from subjective choices of internal and external 
loss data, as well as the number of ORCs. 

• Due to unknowns regarding dependence modeling, the assumptions surrounding 
dependence should be conservative. For example, it is recommended to use a 
^distribution instead of a normal distribution when estimating dependence between 
tail events because the normal distribution will likely underestimate the tails of a loss 
distribution. 

• As dependence model complexity increases and reliability of capital estimates decreases, 
the level of conservatism should increase. 

• If the losses within each ORC are not independent, within-ORC dependence should be 
modeled or data inputs for the model should be modified to reflect independence. 

• The choice of granularity should not impact dependence modeling inappropriately. In 
other words, banks need to ensure that dependence assumptions are not being influenced 
by the choice of too few or too many ORCs. 

• Sensitivity analysis and stress testing should be conducted considering different 
dependence assumptions (e.g., different correlation models). Results from this analysis 
may encourage a bank to revise its estimate of operational risk capital requirements. 

• Some consistency in dependence assumptions across multiple banks is acceptable given 
the evolving nature of dependence models for operational risk. 



©2015 Kaplan, Inc. 



Page 81 



Topic 43 

Cross Reference to GARP Assigned Reading — Basel Committee on Banking Supervision 



Key Concepts 



LO 43.1 

The operational risk management framework (ORMF) is the umbrella under which all 
operational risk management operations fall. According to the Basel Committee, sound 
internal governance forms the foundation of an effective ORMF. 

The operational risk measurement system (ORMS) includes all factors that are components 
of risk measurement and modeling systems used to estimate operational risk capital charges. 

All components of the ORMF and the ORMS must be verified and validated. 

Validation provides assurance of the integrity of the inputs in AMA operational risk capital 
models, the assumptions used in the models, bank processes, and model outputs. Validation 
allows the bank a degree of certainty that the AMA measurement methodologies result in 
credible estimates of operational risk capital. 

Verification is conducted by internal and/or external audits and may be conducted by 
qualified third parties. It is done on a periodic basis. Verification is concerned with the 
overall effectiveness of the ORMF. 



LO 43.2 

Ba nks categorize operational risks, which are quite diverse, based on similar characteristics 
(i.e., event types). The capital charge is significantly influenced by the number of 
operational risk categories (ORCs). 

The Basel Committee requires that an AMA banks risk measurement system sufficiently 
capture operational risk factors that influence estimates of extreme losses. 



LO 43.3 

The loss distribution approach (LDA) has several steps, which largely involve organizing 
the data to model the losses with frequency and severity distributions and ultimately 
determining the capital requirements. 

LDA models frequency of loss and severity of loss separately. For the frequency, LDA 
models use the Poisson distribution, the negative binomial distribution, or the binomial 
distribution. 

Assumptions concerning the severity distributions are generally considered more important 
than the frequency distributions, and using external data is usually necessary. Also, an 
analyst may wish to extrapolate the observed losses to estimate values beyond those 
observed. 
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LO 43.4 

According to the committee, the basis of all operational risk models is a distribution of risk 
losses. Most banks model the severity and frequency distributions separately. 

Loss distributions are fitted to the calculation dataset (i.e., the dataset that includes the 
operational risk losses of the bank) that fulfills the requirements to serve as inputs in 
the AMA operational risk model. The bank must demonstrate that the distributional 
assumptions capture potentially severe “tail” loss events. 



LO 43.5 

Through a process called convolution, the frequency and severity distributions can be 
combined into a single operational loss distribution. Once the loss distribution (that 
combines severity and frequency) is constructed, we can examine the difference between the 
operational value at risk (OpVaR) measure and expected loss to determine the amount of 
economic capital needed to cover potential operational risk losses (i.e., unexpected losses). 



LO 43.6 

Common exposures to polices, structural factors, and environmental factors give rise to 
operational risk dependence across multiple areas within a bank. This dependence will 
likely impact a banks frequency and severity of losses. The chosen approach for modeling 
dependence will influence a banks operational risk capital requirements. 



LO 43.7 

The Basel Committee suggests that there are four data elements that a bank must use 
in various combinations to calculate the operational risk capital charge based on the 
AMA framework. The four data elements are (1) internal loss data, (2) external loss data, 
(3) scenario analysis, and (4) business environment and internal control factors (BEICFs). 
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Concept Checkers 



1. The loss distribution approach (LDA) typically models: 

A. frequency of loss and severity of loss separately. 

B. frequency of loss and severity of loss in a single bivariate distribution. 

C. frequency of loss but not severity of loss. 

D. severity of loss but not frequency of loss. 

2. The Basel Committee requires that four data elements be used to calculate a banks 
operational risk capital charge. Which of the following is not one of the four 
elements? 

A. External loss data. 

B. Scenario analysis. 

C. Internal loss data. 

D. Regression analysis and other statistical tools. 

3. All of the factors that are components of risk measurement and modeling systems 
used to estimate operational risk capital charges are included in the: 

A. operational risk measurement system (ORMS). 

B. corporate operational risk function (CORF). 

C. business environment and internal control factors (BEICFs). 

D. Standards Implementation Group Operational Risk Subgroup (SIGOR). 

4. Which of the following risk management activities is generally conducted by internal 
and external audits or third parties? 

A. Validation. 

B. Verification. 

C. Certification. 

D. Authentication. 

5. Great North Bank and Trust utilizes the advanced measurement approach (AMA). 
The risk managers in the bank have been very careful to meet all the requirements 
of the Basel Committees guidelines. They have chosen a very large number of 
operational risk categories (ORCs) for risk management. Which of the following 
problems is most likely to result from choosing too many operational risk categories? 

A. Too many losses that fall below the bank’s data threshold. 

B. A loss of granularity. 

C. An inability to capture the complexities and idiosyncrasies of the banks 
operations when modeling operational risks. 

D. Loss data that is too high for each category. 
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Concept Checker Answers 



1. A The LDA models frequency of loss and severity of loss separately. For loss frequency, LDA 

models use the Poisson distribution, the negative binomial distribution, or the binomial 
distribution. Loss severity is often modeled with a lognormal distribution. 

2. D The Basel Committee requires four data elements that a bank must use in various 

combinations to calculate the operational risk capital charge based on the AMA framework. 
The four data elements are (1) internal loss data, (2) external loss data, (3) scenario analysis, 
and (4) business environment and internal control factors (BEICFs). 

3. A The operational risk measurement system (ORMS) includes all factors that are components 

of risk measurement and modeling systems used to estimate operational risk capital charges. 
Business environment and internal control factors (BEICFs) are subjective and are often used 
as indirect inputs in models or are used ex post to adjust a models output. 

4. B There are subtle differences between verification and validation of the operational risk 

management systems. Verification is conducted by internal and/or external audits and may be 
conducted by qualified third parties. It is done on a periodic basis. Verification is concerned 
with the overall effectiveness of the ORMF. ORMS validation processes must be verified as 
well. Validation provides assurance of the integrity of the inputs in AMA operational risk 
capital models, the assumptions used in the models, bank processes, and model outputs. 
Validation allows the bank a degree of certainty that AMA measurement methodologies 
result in credible estimates of operational risk capital. 

5. A Very low and very high numbers of ORCs are both problematic, especially when used in 

conjunction with the LDA. When a bank uses only one or a few categories, granularity is 
lost. However, when a bank uses a very high number of ORCs, the number of losses in each 
category is likely to fall below the model s data threshold. The importance of the bank’s 
business lines may be one factor used to determine the level of granularity (Le., the number 
of ORCs). 
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Topic 44 

Exam Focus 

This topic addresses the calculation of liquidity cost and applies this value to the value at risk 
measure. We will see how to compute liquidity-adjusted VaR (LVaR) when considering both 
a constant spread and an exogenous spread approach. Be familiar with how to make these 
calculations, particularly for the constant spread approach. Also, understand the concept of 
cash flow at risk (CFAR) and how liquidity is impacted during a crisis. 



Liquidity Risk 



LO 44.1: Define liquidity risk and describe factors that influence liquidity, 
including the bid-ask spread. 



Liquidity risk is the degree to which a trader cannot trade a position without excess cost, 
risk, or inconvenience. When liquidity risk exists, there can be several types of price 
uncertainty. First, the usual market quote of the average of the bid and ask prices becomes 
less meaningful because the spread is wider, which means the market quote is even farther 
from either the buy or sell transaction price. Second, a larger bid-ask spread means a higher 
cost to get in and out of the position. Third, the actual price of either a buy or sell order 
is less certain because the assets do not trade frequently, and the quoted bid and ask prices 
will probably not be the prices of the respective sell and buy transactions when actually 
executed. There is also an increased risk in that the spread can change (i.e., it is stochastic), 
which will increase the risks of trading. 

Liquidity is a function of the type of market and its characteristics. It depends on factors 
such as the number of traders in the market, the frequency and size of trades, the time it 
takes to carry out a trade, the cost, and the risk of the transaction not being completed. 

It also depends on the type of asset and the degree to which the asset is standardized. A 
less standardized asset will have higher liquidity risk. A forward contract has much more 
liquidity risk than a futures contract, for example, because the forward contract is not 
a standardized contract. Over-the-counter (OTC) derivatives of all types usually have 
relatively high liquidity risk. 

Bid-Ask Spread 

The bid-ask spread is a cost of liquidity. A wider (narrower) spread indicates lower (higher) 
liquidity. If an asset becomes less liquid, the spread increases, and the costs of trading the 
asset increase. The risk of liquidity changing, and changes in the spread, should be included 
with other measures of market risk. The spread can also change as a result of the activities of 
a given trader when liquidity is endogenous, which is described in the next LO. 
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LO 44.2: Define exogenous and endogenous liquidity. 



Exogenous liquidity refers to the bid-ask spread not being affected by the individual trades 
made by investors. This is more likely to be the case when the trades are relatively small. 
Endogenous liquidity refers to when a given trade can influence the liquidity risk of the 
trade (i.e., a trader submitting a buy or sell order that increases the spread). If an investor 
attempts to purchase a large block of an asset, for example, the buy order may have an 
impact on the spread and increase the cost over that indicated by the initial bid-ask prices. 
This can also happen when an investor tries to liquidate an asset. This type of endogeneity 
problem is more likely in illiquid markets and when the trade is large relative to the market. 

In summary, for endogenous markets, if a trader attempts to liquidate (buy) a large 
position, the trader should expect the bid (ask) price to fall (increase) and the bid-ask spread 
to widen. The trader should include such a market reaction when estimating liquidity costs 
and risks. In both the endogenous and exogenous case, the bid-ask spread is still a function 
of the factors already mentioned (the number of traders, the standardization of the asset, 
low transactions costs, etc). 



Liquidity-Adjusted VaR 



LO 44.3: Describe the challenges of estimating liquidity-adjusted VaR (IVaR). 



One of the challenges of estimating liquidity-adjusted value at risk (LVaR) is choosing the 
best method. As in most choices, there is a tradeoff between sophistication and ease of 
implementation, and it is worth noting that sophistication and usefulness are not necessarily 
positively correlated. It is recommended to find approaches that are transparent in their 
assumptions and simple to implement (e.g., implementable with just a spreadsheet). A good 
way to do this is to determine liquidity “add-ons” that allow a researcher to modify original 
VaR estimates that did not include factors for illiquidity. In addition to addressing liquidity, 
the approach can also assess the impact of assumptions on estimates of VaR. 

Another challenge is liquidity adjustments that are compatible with the basic VaR approach 
and each other. This is because different methods look at different aspects of illiquidity, 
and it can be helpful to combine ‘add-ons’ that give the best overall liquidity adjustment. 

In other words, two less sophisticated methods may be much better than one really good 
sophisticated method. 

Another challenge is to check how the liquidity adjustment changes other inputs, such as 
the confidence level, holding period, or any other parameters (i.e., the sensitivity of the 
other inputs to the liquidity adjustment). The researcher should be aware of some basic 
relationships (e.g., an increase in the holding period should lower the level of the liquidity 
adjustment). 

The researcher should try to calibrate the model against real data (e.g., check if the bid-ask 
spread parameters are empirically plausible), and properly stress test the model, as well as 
backtest the model. The researcher should be aware that there is probably not a single, best 
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approach that would exclude the use of all others. Furthermore, using different approaches 
can help highlight different liquidity concerns. 



LO 44.4: Describe and calculate LVaR using the constant spread approach and the 
exogenous spread approach. 



The constant spread approach, as the name implies, calculates LVaR assuming the bid-ask 
spread is constant. This makes the liquidity cost equal to half the spread multiplied by the 
size of the position to be liquidated. The liquidity cost (LC) to add on to the initial VaR 
estimate is then: 



LC = 0.5 xV x spread 
where: 

V = value of the position 

(ask price — bid price) 

spread = 7 ; 

(ask price + bid price) / 2 



Recall that VaR quantifies the maximum loss for a given confidence level over a particular 
holding period. For example, a typical VaR calculation may indicate a 1% probability of 
losses exceeding $10 million over a 5-day holding period. LVaR is calculated using the 
following formula assuming a constant spread: 



LVaR = (V x z a x a) + [0.5 x V x spread] 

LVaR = VaR + LC 
where: 

V = asset (or portfolio) value 
z a = confidence parameter 
a = standard deviation of returns 




Professor’s Note: Notice that VaR in this example is dollar VaR as opposed to 
percentage VaR. 



The confidence level of the estimate is 1 — a (e.g., 5% level of significance (a) = 95% 
confidence level). Note that the larger the spread, the larger the calculated LVaR. Since 
liquidity risk incorporates selling the asset, not a full “round trip,” only half of the spread 
is used. 
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Example: Computing LVaR 

Suppose that ABC Company has a current stock price of $100 and a daily standard 
deviation of 2%. The current bid-ask spread is 1%. Calculate LVaR at the 95% 
confidence level. Assume a constant spread. 

Answer: 

LVaR = (100 x 1.65 x 0.02) + (0.5 x 100 x 0.01) = $3.80 



The previous discussion involved the use of normal VaR (i.e., VaR assuming asset prices are 
normally distributed). In practice, asset prices are lognormaliy distributed as was illustrated 
in the FRM Part I curriculum when we examined the Black-Scholes- Merton option pricing 
model. In this assigned reading, the author uses lognormal VaR to calculate the liquidity- 
adjusted VaR. The conventional lognormal VaR, with no adjustment for liquidity risk, is 
calculated in the following fashion: 



Lognormal VaR = [1 — exp(p — ox z )] x V 
where: 

p = mean return 

The liquidity-adjusted VaR is then calculated as follows: 



LVaR - VaR + LC - [1 — exp(p — cr x z Q ) + 0.5 x spread] x V 



Using the simplifying assumption of p = 0, the ratio of LVaR to VaR becomes: 

LVaR _ i spread 

VaR 2 X [1 — exp(— ct X z a )] 

This expression indicates that the liquidity adjustment will increase (decrease) when there 
is an increase (decrease) in the spread, a decrease (increase) in the confidence level, and a 
decrease (increase) in the holding period. 




Professor’s Note: Notice that the calculation of lognormal VaR and normal 
VaR will be similar when we are dealing with short-time periods and practical 
return estimates. 



Example: Computing LVaR to VaR ratio (constant spread) 

Assume the following parameters: p = 0, cr = 0.012, spread = 0.02, and a 95% confidence 
level. Compute the LVaR to VaR ratio. 



©2015 Kaplan, Inc. 



Page 89 



Topic 44 

Cross Reference to GARP Assigned Reading — Dowd, Chapter 14 



Answer: 

LVaR , 0.02 

— — — H T -? — 1.5 1 

VaR 2 X [l — exp(— 0.0 12x1 .65)] 

The increase from VaR to LVaR is just over 50%, from only a 2% spread. This 
demonstrates that even a small spread can translate into a surprisingly large liquidity 
adjustment to VaR. 



LVaR can also be calculated given the distribution characteristics of the spread. This is the 
foundation underlying the exogenous spread approach. If you are given the mean and 
standard deviation of the spread, you would apply the following formula: 

LVaR - VaR + 0.5 x [(p s + z' a x cr s )] x V 

Professor’s Note: We add the confidence parameter times the volatility of the 

© spread to the mean of the spread since the liquidity adjustment increases the 
value at risk. Also, notice that the confidence parameter (or z-score j used for 
the uncertainty of the spread is labeled differently. The confidence parameter, 
in this case, is a value to be determined. 

The exogenous spread approach assumes that the spread is stochastic and that the trades of 
a single trader do not affect the spread. The spread could follow one of many distributions; 
for example, the normal distribution or a more leptokurtic distribution (historically, the 
distribution of the spread has been highly non-normal with excess amounts of kurtosis). 
Once having assumed a distribution, the researcher can estimate the LVaR using Monte 
Carlo simulation by simulating values for both V and the spread, incorporating the spread 
into V to get liquidity-adjusted prices, and then infer the liquidity-adjusted VaR from the 
distribution of simulated liquidity-adjusted prices. 



Example: Computing LVaR (assuming normal VaR) 

Suppose that ABC Company has a current stock price of $100 and a daily standard 
deviation of 2%. The mean of the bid-ask spread is 2%, and the standard deviation of 
the bid-ask spread is 1%. Calculate LVaR at the 95% confidence level assuming the 
confidence parameter of the spread is equal to 3. 

Answer: 

LVaR = (100 x 1 .65 x 0.02) + i 100 x (0.02 + 3x0.01) = $5.8 
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The researcher can determine the optimal value of z r a using some suitably calibrated Monte 
Carlo exercise [Bangia et al. (1999) 1 assume a value of three for z* ]. Applying lognormal 
assumptions, the LVaR using the exogenous spread approach is the lognormal VaR plus the 
liquidity adjustment: 



LVaR = VaR + LC = V x {[1 — exp(p — ox z a )] + [0.5 x (p s + z' a x cr s )]} 

It is worth noting that if c s equals zero, then this expression becomes the LVaR formula for 
the constant spread approach where p s - spread. Thus, this approach is simply the constant 
spread approach with an added expression to allow for a stochastic spread. 

We can now apply the familiar LVaR to VaR ratio: 

LVaR _ i | LC =1 ; (ps+z^xog) 

VaR VaR 2 X [l — exp(— o X z a )] 



Example: Computing LVaR to VaR ratio (exogenous spread) 

A researcher estimates the mean and standard deviation of the spread to be 0.02 and 
0.005, respectively. He also estimates that p = 0 and cr = 0.012 for the underlying returns 
distribution. Using a 95% confidence level, compute the ratio of LVaR to VaR. Assume 
the confidence parameter for the spread, z f a , is equal to 3. 

Answer: 

LVaR _ (0.02 + 3 X 0.005) 

— 1 H r T — Loy 

VaR 2x[l — exp(— 0.012x1.65)] 

The result here, when compared to the previous answer, demonstrates how including the 
possibility of the spread being random (stochastic) can increase the liquidity adjustment. 
In this case, it almost doubles from 51% to 89%. 



Endogenous Price Approaches 



LO 44.5: Describe endogenous price approaches to LVaR, their motivation and 
limitations. 



Both the constant spread approach and the exogenous spread approach assume that prices 
do not change in response to trading (i.e., prices are exogenous). This may not always be the 
case, and it may be necessary to make a liquidity adjustment for endogenous prices. In the 
case of selling for example, there may be downward pressure on prices, which causes a loss. 
VaR should include an adjustment for the possibility of this loss. The adjustment should be 
larger if the market prices are more responsive to trades. 

1. Bangia, A.F. Diebold, T. Schuermann, and J. Stroughair. (1999). “Liquidity on the outside.” 

Risk 12 (June): 68— 73. 
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Of the various ways to include an adjustment, a relatively simple method uses the concept 
of elasticity, E. In this case, it is the proportional change in price divided by the proportion 
of the market traded: 



E = 



AP/P 

AN/N 



where: 

AN/N = size of the trade relative to the entire market 

Generally, it is the case that E < 0 and AN/N > 0. A researcher can estimate values for E 
and AN/N and input them into an expression for LVaR as follows: 



LVaR = VaR X 



AP) 



= VaRx 



f AN) 

1 — Ex 



N 






LVaR , ^ AN 

— — = 1-Ex 

VaR N 



The approach is very convenient because the adjustment is independent of the computation 
of VaR and its assumptions, and the ratio of LVaR to VaR is a function of only two inputs. 
The obvious limitation is its narrow focus and that it entirely ignores bid-ask spreads and 
transactions costs. On the other hand, a researcher can easily combine this adjustment with 
one of the other liquidity adjustments by simply multiplying the effects: 



LVaR 

VaR 



combined 



LVaR 

VaR 



X 



exogenous 



LVaR 

VaR 



endog< 



;enous 



Example: Endogenous price approach 



A trader has a position worth 10% of the size of the market (i.e., AN/N = 0.1) and 
estimates that E = —0.4 so that AP/P -Ex AN/N = —0.4 x 0.1 = —0.04. Compute the 
ratio of LVaR to VaR based only on endogenous factors and the combined LVaR to VaR 
ratio assuming the ratio for the exogenous approach is 1.89. 



Answer: 



LVaR 



VaR 



endogenous 



= 1 — ( — 0.04) = 1.04 



Thus, the adjustment for endogeneity will increase the total adjustment for liquidity 
by 4%. Using the liquidity adjustment for the exogenous approach yields the following 
combined result: 



LVaR 

VaR 



combined 



= 1.89x1.04 = 1.97 



Page 92 



©2015 Kaplan, Inc. 




Topic 44 

Cross Reference to GARP Assigned Reading — Dowd, Chapter 14 

Jarrow and Subramanian (1997) 2 offer a more sophisticated method called the liquidity 
discount VaR, where the trader maximizes expected utility by liquidating the position 
within a certain period of time. It incorporates both exogenous and endogenous market 
liquidity, spread cost, spread risk, an endogenous holding period, and an optimal 
liquidation policy. It does so with three modi fi cations: (1) uses an optimal holding period 
based on the traders expected-utility optimization problem, (2) adds the average liquidity 
discount to the trader s losses, and (3) has the volatility measure include the volatility of the 
time to liquidation and the volatility of the liquidity discount factor, as well as the volatility 
of the underlying market price. 

Liquidation, Transaction Costs, and Market Price Impact 

As with most financial activities, there are tradeoffs to consider when executing a trade. 

Attempting to sell quickly will usually increase the transactions costs and may have an 
unfavorable impact on the selling price. Taking more time to sell can increase the exposure 
to exogenous and unfavorable price changes. A trader should recognize the tradeoff and 
identify a set of efficient trading strategies that produce the minimum remaining risk 
exposure at any given point in time, for any given expected cost. The trader should choose 
the strategy that best fits his risk aversion. A more (less) risk averse trader would choose 
a strategy that executes more (less) quickly. A more (less) quick execution will reduce 
(increase) price uncertainty with higher (lower) transactions costs. 

Liquidity at Risk 



LO 44.6: Describe liquidity at risk (LaR) and compare it to VaR, describe the 
factors that affect future cash flows, and explain challenges in estimating and 
modeling LaR. 



Liquidity at risk (LaR) is also known as cash flow at risk (CFaR) and is the maximum likely 
cash outflow over the horizon period at a specified confidence level. A positive (negative) 
value for LaR means the worst outcome will be associated with an outflow (inflow) of cash. 
LaR is similar in concept to VaR, but instead of a change in value, it deals with a cash flow. 
LaR is also distinct from liquidity-related losses, but they are related. 

As an example, an investor has a large market risk position that is hedged with a futures 
position. If the hedge is a good one, the basis risk is small, and the VaR should be small. 
There is the possibility of margin calls on the futures position, however, and this means 
there is the possibility of a cash outflow equal to the size of that position. In summary, the 
hedged position has a small VaR but a large LaR. At the other extreme, European options 
have zero LaR until expiration, but potentially large VaR prior to maturity. 

The following is a list of factors that influence cash flows and LaR: 

• Borrowing or lending. 

• Margin requirements on market risk positions that are subject to daily marking to market. 

• Collateral obligations, such as those on swaps, which can generate inflows or outflows of 
cash from changes in market factors, such as interest rates. 



2. Jarrow, R.A. and A. Subramanian. (1997). “Mopping up liquidity.” Risk 10 (December): 
170-173. 
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• Short explicit options or implicit options (e.g., convertibility and call features). 

• Changes in risk management policy (e.g., a change in the type of hedge), which may 
change mark-to-market requirements. 

Two other considerations are as follows: (1) LaR can increase when the firm is facing hard 
times (e.g., a credit downgrade increases the rate on bank loans); and (2) there are positions 
that are similar in terms of market risk (e.g., a futures versus an options hedge), but are very 
different in terms of LaR. 

As a practical matter for the firm attempting to estimate LaR, consider using the firms 
VaR procedures to estimate the VaRs of marginable securities and then combine this LaR 
estimate with comparable figures from other sources of liquidity risk within the organization 
to produce an integrated measure of firm-wide liquidity risk. The point is to use the existing 
and accepted VaR procedures to estimate liquidity risks. It is obviously ad hoc, however, and 
a firm facing complex liquidity risks should build a more appropriate model. This would 
involve identifying and modeling the variables indicated in the following list: 

• The certain cash flows (e.g., from U.S. Treasury investments). 

• The unconditional uncertain cash flows (e.g., from risky bonds). 

• The conditional uncertain cash flows (e.g., those that only result if a certain decision is 
made, such as making an investment). 

• Other conditioning variables that might trigger cash flows. 

Having identified the factors, the manager can construct an appropriate engine to estimate 
the risks. Estimating the LaR may only require a variance-covariance approach, or it may 
require a more advanced simulation approach. 



Role of Liquidity During Crisis 



LO 44.7: Explain the role of liquidity in crisis situations and describe approaches 
to estimating crisis liquidity risk. 



In a crisis, assumptions concerning the level of liquidity and other properties that are 
reasonable in a “normal” market may not hold. Such crises have occurred in 1987, 1992, 
1998, and 2007—2009. Some event usually precipitates the crisis, such as a large fall in some 
asset prices, which leads to lower demand and wider bid-ask spreads. The time needed for 
selling orders to be executed increases. Market liquidity falls at the very time the market 
needs it. 

Many things change during the course of a crisis, and a researcher needs a model that takes 
into account the distinctive features of a crisis (e.g., large losses, high bid-ask spreads). 
CrashMetrics may be one way to address this. As an example, the following is the profit/loss 
on a derivative position based on a delta-gamma approximation: 

n = 6AS+^(AS) 2 
2 

where: 

AS - change in the stock price 
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Taking the derivative of this measure with respect to AS and solving for AS gives the 
change that produces the maximum loss: AS = -6/% and that maximum loss in absolute 
value terms is: 

g 2 

max(loss) — —min (II) — — 

2 1 

For a derivative position that requires margin and mark-to-market, letting m equal the 
margin requirement, the worst-case cash outflow is simply m times this amount: 
m x S 2 /(2^). This approximation can be more precise with the inclusion of the effects of 
other Greeks (e.g., thetas), counterparty risk, and other factors. 

Another method for examining the liquidity consequences associated with worst-case 
scenarios is to apply the basic procedure above to an extreme -value method estimated with 
expected shortfall (ES). The cash flow would then be m x ES. 

These two variations of estimating the worst-case cash flow do not address many real-world 
complications. A researcher might also wish to address the complications with simulations 
designed for specific complications. Those complications include: 

• The discreteness of credit events. 

• The interdependency of credit events. 

• The interaction of credit and market risk factors. 

• Complications arising from the use of credit-enhancement methods, such as netting 
arrangements, periodic settlement, credit derivatives, credit guarantees, and credit triggers. 

Crisis-scenario analysis is an alternative to the probabilistic approaches described 
previously. This would involve analyzing the potential problems of a particular event (e.g., 
the failure of a major institution) and working through the specific details of how this might 
occur. This has the advantage of working through scenarios at a chosen level of detail and 
accounting for complications and interactions. The problem is that there will be a lot of 
subjectivity, and the results will depend heavily on the assumptions used. 
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Key Concepts 



LO 44.1 

Liquidity risk is the degree to which a trader cannot trade a position without excess cost, 
risk, or inconvenience. Liquidity depends on factors such as the number of traders in the 
market, the frequency and size of trades, the time it takes to carry out a trade, the cost, and 
the risk of the transaction not being completed. It also depends on the type of asset and the 
degree to which the asset is standardized. 

A wider (narrower) bid-ask spread indicates lower (higher) liquidity. If an asset becomes less 
liquid, the spread increases, and the costs of trading the asset increase. 



LO 44.2 

Exogenous liquidity refers to the bid-ask spread not being affected by the individual trades 
made by investors. This is more likely to be the case when the trades are relatively small. 

Endogenous liquidity refers to when a given trade can influence the liquidity risk of the 
trade (i.e., a trader submitting a buy or sell order that increases the spread). 



LO 44.3 

The main challenge in estimating liquidity is finding the best method. One approach is 
finding adjustments to add on to the basic VaR. The researcher must understand how the 
inputs affect the “add-ons” and, if there are more than one, how the add-ons interact. 



LO 44.4 

The constant spread approach assumes the bid-ask spread is constant and the liquidity cost 
is simply, LC = 0.5 x spread x V, which can be added into the VaR formula. 



VaR = [1 — exp(p — cr x z Q )] x V 



LVaR - VaR + LC = [1 — exp(p —ox z Q ) + 0.5 x spread] x V 



LO 44.5 

To account for endogeneity, a trader may estimate the elasticity of the price to the 
proportion of the market in a given large trade, denoted E, the proportion itself, denoted 
AN/N, and adjust the VaR formula. 



/ 

LVaR = VaR X 1 



AP 1 
P j 






= VaRx 



1 — Ex 






AN 

N 



\ 



) 
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Liquidity at risk (LaR) is also known as cash flow at risk (CFaR) and is the maximum likely 
cash outflow over the horizon period at a specified confidence level. 

LaR can be very different from the VaR of the same position. For example, a bond hedged 
with a futures contract has low VaR but high LaR from the possible margin call on the 
futures contract. 

Factors that affect future cash flows are: borrowing or lending, margin requirements, 
collateral obligations, options positions, and changes in risk management policy 



LO 44.7 

Many things change during the course of a crisis, and a researcher needs a model that takes 
into account the distinctive features of a crisis (e.g., large losses, high bid-ask spreads). 
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Concept Checkers 



1. Suppose that portfolio XYZ has a $1,000,000 portfolio invested in a stock that has 
a daily standard deviation of 2%. The current bid-ask spread of that stock is 1%. 
Assuming a constant spread, what is the liquidity-adjusted VaR (normal VaR) at the 
95% confidence level? 

A. $5,000. 

B. $38,000. 

C. $44,200. 

D. $43,000. 

2. Which of the following actions would most likely increase liquidity risk? 

A. A rapid execution of orders. 

B. A higher level of standardization of the asset. 

C. An increase in the number of traders and a decrease in the size of those trades. 

D. A decrease in the number of traders and an increase in the size of those trades. 

3. When a given trade can influence the liquidity risk of a trade, this type of liquidity is 
known as: 

A. exogenous liquidity. 

B. undefined liquidity. 

C. endogenous liquidity. 

D. operational liquidity. 

4. Assuming the following parameters: p= 0, cr = 0.006, spread - 0.01, and a 95% 
confidence level, the ratio of LVaR to VaR is closest to: 

A. 1.08. 

B. 1.51. 

C. 1.66. 

D. 2.04. 



5. A trader has a position worth 5% of the size of the market (i.e., AN/N = 0.05) and 
estimates that the elasticity of price to size of trade is: E = -0.2. The ratio of LVaR to 
VaR based only on endogenous factors is closest to: 



A. 


0.99. 


B. 


1.01. 


C. 


1.05. 


D. 


1.40. 
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Concept Checker Answers 



1. 

2 . 

3. 

4. 

5- 



B 

D 

C 

B 

B 



LVaR = (1,000,000 x 1.65 x 0.02) + (0.5 x 1,000,000 x 0.01) = $38,000 
Larger and fewer traders will ultimately lower liquidity and increase liquidity risk. 
It is “endogenous” because it is determined by the trading activity itself. 



LVaR 0.01 

= 1 + 7 7 

VaR 2xl-exp(- 0.006x1. 65) 



1.508 



AP/P = E x AN/N = -0.2 x 0.05 = -0-01 



LVaR 

VaR 



endogenous 



1 — ( — 0 . 01 ) = 1.01 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 

Model Risk 



Topic 45 

Exam Focus 

Model risk is the risk associated with using financial models that are inherently flawed. 

Errors can arise from data errors, model misapplication, and inappropriate underlying 
assumptions. Proper risk management necessitates knowledgeable managers and processes 
for documenting, testing, and updating models. For the exam, be able to identify sources of 
model risk, and understand how model risk can be managed. 



What Is Model Risk? 



LO 45.1: Define model risk; identify and describe sources of model risk. 



Model risk is the risk associated with trying to capture an observed phenomenon using a 
financial model. Models, by their very construction, are flawed instruments and cannot 
possibly capture the full scope of factors necessary to explain the dynamic relationships we 
observe. In the end, models are judged on their predictive ability to capture the relevant 
features of the underlying process rather than the assumptions used to build the model. In 
finance, the output of most models is a price (or pricing relationship) so the magnitude of 
error will depend on the structure of the underlying instrument. For example, we would 
expect less error in pricing Treasury bonds than in pricing complex structured notes or 
exotic derivatives. This is due to both the underlying price dynamics and the fact that 
the pricing of complex instruments depends on more inputs, may depend critically on 
correlations with other variables, and is impacted by a host of unobservable factors. 

Sources of Model Risk 

All models are incorrect to some degree so it is better to ask oneself what is (or could be) 
wrong with the model rather than glossing over potential errors in construction. The 
question becomes one of degree (what is wrong with my model?) rather than kind (is my 
model wrong?). The important sources of model risk are summarized below. Recognize that 
this is a generalized list and any particular model could very well face additional sources of 
error. 

* Incorrect model specification. This risk is probably the most obvious in that the 

model itself is misspecified. This may occur for a variety of reasons. First, there may be 
a misspecification of the underlying stochastic process. For example, the model may 
assume a normal distribution when a lognormal distribution is more accurate. It is very 
difficult to detect this type of error. Second, the model may have omitted an important 
risk factor. This missing ingredient may be the failure to include an independent variable 
or including a simplifying assumption that is inappropriate (e.g., covariance stationarity). 
Third, the relationship between variables is misspecified, such as assuming independence 
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of variables when in fact a significant correlation exists. Fourth, many models assume 
perfect market conditions and ignore frictions such as transactions costs and liquidity 
factors. These assumptions will make the model more tractable but also reduce the 
reliability of the results. A classic example occurred during the October 1987 crash when 
trading strategies depended on dynamic hedging but the falling market made it much 
more costly (and, in some cases, impossible) to unwind the positions. 

• Incorrect model application. This risk occurs from trying to fit the proverbial square 
peg into a round hole. An otherwise well-constructed model applied in the wrong 
situation is not likely to work well. For example, using standard bond pricing models 
to value mortgage-backed securities instead of models that include a prepayment factor 
is an obvious misapplication. Misapplication may also occur if the model becomes 
outdated. Errors may arise from Monte Carlo simulations if an insufficient number of 
trials are conducted to generate the empirical distribution, or even if the random number 
generator is biased. 

• Implementation risk. The wide application of financial models lends itself to error from 
user-defined inputs. For example, multiple users of the same model may incorporate 
different measures of bid-ask spread, use different volatility estimates, or use different 
criteria for the removal of outliers. Studies have revealed that users asked to estimate 
from the same model often arrive at significantly different outputs. 

• Calibration error. Input parameters may be outdated, measured with error, or based 
on inappropriate sample periods. For example, if the return on a risk-free investment is 
needed as a model input and is estimated from the 2001—2005 period, this will lead to 
much lower estimates than if calculated over a longer horizon. 

• Progr am ming errors. Errors of this type can result from faults in the program itself, 
such as programming bugs, incorrect logic, unacceptable rounding error in algorithms, 
or poor random number generation. Risk is also introduced by the actual code itself as 
it becomes more complex and other programmers try to understand, update or edit the 
original code. 

• Data problems. This is the classic “garbage in, garbage out” phenomenon. Questions 
arise if the data has been obtained from a third party. Assumptions may be needed about 
collection procedures. For example, suppose a series of closing prices is provided: is it the 
last transaction or the midpoint of last quoted bid and ask? 

Quantifying Model Risk 



LO 45.2: Describe the challenges involved with quantifying model risk, and 
explain quantitative methods for estimating model risk given unknown parameters 
in a financial model. 



It is easier to identify what could be wrong with a model than trying to quantify the error. 
It is hard to quantify model risk when the parameter of interest is unobservable. At some 
point it becomes necessary to make some assumptions either about the model itself, the 
parameter inputs, or the nature of the error. Therefore quantifying model risk assumes a 
particular form of modeling error and implicitly ignores other components of model risk. 
This leads to the conclusion that any estimate of model risk is most likely an underestimate 
of the true level of model risk. 
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Methods for Estimating Model Risk 



We will discuss four methods for estimating model risk based on the number of 
components and assumed underlying distribution(s). 

1 . Single unknown parameter. The unknown parameter is assumed to follow a 

distribution that will allow construction of a confidence interval to bound the error. An 
example follows to illustrate the general procedure. Suppose the parameter of interest 
is assumed to follow a normal distribution with mean of 0 and unknown standard 
deviation, a. An estimate of cr, s, can be derived from the sampling distribution based 
on samples of size n. The resulting confidence interval for cj 2 at the 90% significance 
level is: 



(n — l)s 2 

v 2 

Xo.95 



«r 



< 



(n-l)s 2 

A / 2 

Xo.05 



where: 

X 2 = critical value from a chi-squared distribution with a significance level of a 

Assuming the basic VaR calculation (VaR = — cr x z ) generates a confidence interval for 
VaR: 



n — 1 



VXo. 



X sz a < VaR — — crz rt < — 



a 



95 



'V 



n — 1 

~r~ Xsz a 

Xo.05 




Professor’s Note: Recall the discussion of the chi-squared distribution from the FRM 
Part I curriculum. In the confidence intervals above, n — 1 is the degrees of freedom. 



2. Two unknown parameters. If we are uncertain about a particular parameter we are 
likely to be uncertain about others as well. Hence, the previous case, while illustrative, 
is often too simple. Since finding closed-form solutions for the two-parameter case 

is challenging and often not realistic, simulation methods are used. It is necessary 
to assume distributions for each unknown parameter as before. Repeated trials 
drawing jointly from both distributions generate the empirical distribution for VaR. 
Construction of the confidence interval is then straightforward. 

3. Unknown correlations. The preceding procedure can be generalized to multiple 
unknown parameters for more complex modeling. In addition, draws from normal 
distributions for each mean estimated and draws from distributions for each 
variance and covariance could then estimate correlations. 
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4. Mixing parameter and distribution risk. When faced with uncertainty about the 

underlying distribution of the parameter, a mixing distribution may be appropriate. It 
is straightforward to implement a simulation where multiple distributions are drawn 
according to some predetermined probability distribution (e.g., normal distribution 
is drawn with probability p and a lognormal is drawn with probability 1 — p). The 
parameters of each distribution must still be assumed so parameter estimation error is 
not eliminated. Repeated trials of the mixing distribution will generate the empirical 
VaR distribution and associated confidence intervals, which allows measurement of 
model risk. 

Managing and Mitigating Model Risk 



LO 45.3: Identify ways risk managers can manage and mitigate model risk. 



There are a number of reasonable procedures to guard against model risk. The following 

list is more of a “reality check” than a process for rigorous analytic testing of the proposed 

model. 

• Understand that model risk is inevitable, be cognizant of the limitations of a given 
model, and be sure models are applied in the appropriate situation. 

• Analyze if the model’s performance is sensitive to key assumptions. 

• Verify that the model works correctly for simple problems with known solutions. 

• Choose the simplest model that provides useful results. Only add complexity if there is a 
strong need. 

• Place more confidence in a model that has been backtested and stress tested. 

• When applicable, simulate model risk to provide useful information on its performance. 
The caveat is, of course, that not all risk is captured and hence, the model risk will 
exceed the estimate. 

• Pay attention to small problems, which can be indicative of larger problems with the 
model. 

• Conduct simple diagnostic testing of residuals to reveal information about the model’s 
predictive ability and identify outliers or other abnormalities in the data. Use non- 
parametric tests if appropriate. 

• Reevaluate and update models regularly to stay current with recent trends and changing 
market conditions. 

The Role of Senior Managers 



LO 45-4: Summarize the role of senior managers in mana g ing model risk. 



While senior managers need not be expert modelers per se, it is imperative they understand 
the fundamentals of model risk and establish an organizational framework that implements 
sound risk management procedures. Managing model risk is similar to managing other 
tasks; managers should question model features, oversee internal protocol, and listen to 
subordinate concerns. In addition, managers must oversee individual position-taking and 
instill risk management as a means to provide corporate stability rather than as an obstacle 
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to individual (excessive) risk-taking, especially if tied to compensation. Managers must track 
model performance, implementation, and misuse. 



LO 45.5: Describe procedures for vetting and reviewing a model. 

LO 45-6: Explain the function of an independent risk oversight (IRO) unit. 



Models should be vetted for completeness before implementation. A detailed procedure 
would involve review of documentation, including the original code, verification of model 
appropriateness based on portfolio composition, and establishment and testing against 
benchmark and no-arbitrage relationships. Vetting is most effective against a backdrop of 
organizational freedom to independently monitor and evaluate risk management functions. 
This is particularly true if the evaluators will be part of the risk management division. 
Regular audits of the models and procedures and efficient record keeping are also important 
features of the vetting process. 

The independent risk oversight (IRO) unit is ideally a middle-office unit responsible 
for overall risk management and measurement. The unit head should report directly to 
the CEO and may even sit on the board of directors to communicate performance and 
strategy. Procedure and position limits will vary by the overall risk-taking behavior of the 
firm. Sound practice will insulate the unit from the pressures of the front-office and traders. 
Additionally, compensation will not be based on the performance of other units. 
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Key Concepts 



LO 45.1 

Model risk is the risk associated with using financial models to simulate complex 
relationships. 

All models are inherently flawed, so strive for simplicity and judge models on their 
predictive ability rather than on (often incorrect) assumptions. 

Model risk may arise from incorrect model applications, implementation risks, calibration 
errors, programming errors, and data problems. 



LO 45.2 

Measuring model risk assumes an underlying distribution for a single unknown parameter 
and generates a confidence interval for VaR. 

Simulation methods are used for estimating model risk for multiple parameters. 



LO 45-3 

Managers can protect against model risk by employing reality checks of the model, 
including testing against known solutions, backtesting and stress testing, updating the 
model, and analyzing sensitivity to parameter assumptions. 



LO 45.4 

Senior managers need not be experts in modeling, but should be knowledgeable enough to 
question model inputs, uses, and limitations. 



LO 45.5 

Vetting involves detailed review of documentation, including original code, verification of 
model appropriateness based on portfolio composition, and establishing and testing against 
benchmark and no-arbitrage relationships. 



LO 45.6 

The independent risk oversight (IRO) unit is responsible for overall risk management and 
measurement; it should operate independently of other business units. 
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Concept Checkers 



1 . Which of the following is not a source of model risk? 

A. Programming errors. 

B. Failure to recalibrate models. 

C. Minimal rounding errors from algorithms. 

D. Implementation of models for situations for which the models were not 
originally designed. 

2. Financial models: 

A. are not likely to become outdated. 

B. are inherently accurate instruments. 

C. should be used in the IRO unit exclusively. 

D. contain heterogeneous levels of model risk. 

3. Risk managers should manage model risk using which of the following approaches? 
Managers should: 

I. always add complexity to the model. 

II. identify outliers within the models data. 

A. I only. 

B. II only. 

C. Both I and II. 

D. Neither I nor II. 

4. Which of the following statements concerning quantifying model risk is false? 

A. Quantifying model risk often uses VaR estimates to measure the loss level. 

B. Parameter estimation may use parametric or non- parametric tests. 

C. Estimates of model risk are likely to underestimate the true risk level. 

D. Quantifying model risk is simplified due to the unknown distribution of the 
parameter. 

5. Managers can best guard against model risk by performing which of the following 
oversight activities? 

A. Backtesting and stress testing estimates. 

B. Testing models against unknown problems. 

C. Minimizing small problems as inherent in parameter estimation. 

D. Developing complex models and testing with both parametric and non- 
parametric tests. 



Page 106 



©2015 Kaplan, Inc. 





Topic 45 

Cross Reference to GARP Assigned Reading — Dowd, Chapter 1 6 



Concept Checker Answers 



1 . C Minimal rounding errors is an attractive feature of an algorithm. 

2. D Model risk will vary from model to model based on complexity, data quality, and 

implementation. 

3. B Managing model risk involves being cognizant of the limitations of a given model, 

reevaluating and updating models regularly, and identifying outliers or other abnormalities in 
the model’s data. The manager should choose the simplest model that provides useful results 
and only add complexity if there is a strong need. 

4. D Model risk must assume a distribution of the underlying parameter. This increases the model 

risk compared to knowledge of the underlying parameter distribution. 

5. A Backtesting and stress testing are standard procedure for testing models. Models should be 

tested against known problems, not unknown problems. Small problems can be indicative of 
larger modeling issues and should not be ignored. Simple models are preferred unless there is 
strong reason to add complexity. 
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Assessing the Quality of 
Risk Measures 



Topic 46 

Exam Focus 

This topic focuses primarily on model risk and model errors, with specific criticisms of the 
value at risk (VaR) model. It is important to understand model risk and the factors that 
could result in variability in VaR estimates. It is also important to understand the challenges 
associated with mapping risk factors to positions in making VaR calculations. Be ready to 
explain how incorrect mapping factors can understate certain risks including reputational, 
liquidity, market, and basis risk. The second part of this topic focuses on two specific case 
studies on the failures in strategies during 2005 and 2007—2009 related to modeling errors 
and the underestimation of key risks. 



Model Risk 



LO 46.1: Describe ways that errors can be introduced into models. 



Models are highly useful in simulating real-life scenarios; however, they can suffer from 
several risks. Model risk is the risk of incorrect trading or risk management decisions due 
to errors in models and model applications, which can lead to trading losses and give rise 
to legal, reputational, accounting, and regulatory risk. Biases in models themselves do 
not necessarily cause model risk; however, inaccurate or inappropriate inputs can create 
distortions in the model. 

There are several ways in which errors can be introduced into models. These include bugs in 
the programming of model algorithms, securities valuations or hedging, variability of value 
at risk (VaR) estimates, or inaccurate mapping of positions to risk factors. 

For example, bugs in programming occurred in May 2008 when Moody’s used flawed 
programming to incorrectly assign AAA ratings to certain structured credit products. It 
happened again in October 2011 when bugs in the quant programming used by AXA 
Rosenberg 1 led to investor losses. For Moody’s, model risk was related to reputational and 
liquidity risk because the model errors had been discovered prior to being made public and 
coincided with a change in ratings methodology that resulted in no change to the ratings 
of certain products. As a result, Moody’s was suspected of tailoring its model to the desired 
ratings, which damaged the company’s reputation. For AXA Rosenberg, the discovery of the 
model error had not been made public in a timely manner, leading to both regulatory fines 
and considerable reputational damage to the firm. 



1 AXA Rosenberg Group, LLC is a division of the French insurance company AXA. 
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Model errors in securities valuations or in hedging can create losses within a firm and 
lead to market risk and operational risk. Market risk is the risk of buying overvalued (or, 
at a minimum, fairly valued) securities in the market that are thought to be undervalued. 

Operational risk is the risk of recording unprofitable trades as profitable. 

Relying on market prices rather than model prices through marking positions to market can 
theoretically avoid model errors and reduce valuation risk. A problem with this approach, 
however, is that certain positions, including long-term bank commercial loans, are difficult 
to mark-to-market due to infrequent trading and complexities in valuation. 



Friability of VaR Estimates 



LO 46.2: Describe how horizon, computational and modeling decisions can impact 
VaR estimates. 



Risk management is typically implemented via computer systems that help to automate 
gathering data, making computations, and generating reports. These systems can be made 
available commercially, and are typically used by smaller firms, while larger firms tend 
to use their own in-house systems, often in combination with commercial models. The 
implementation process for computing risk is usually referred to as the firm’s VaR model, 
although the general computation process can apply to any risk measure other than VaR. 

Data preparation is crucial in risk measurement systems. There are three types of data 
involved: 

1 . Market data is time series data (usually asset prices) that is used in forecasting the 
distribution of future portfolio returns. Market data involves obtaining the time series 
data, removing erroneous data points, and establishing processes for missing data. All of 
these steps can be costly but necessary. 

2. Security master data is descriptive data on securities, including maturity dates, 
currency, and number of units. Building and maintaining data for certain securities, 
including equities and debt, can be challenging; however, it is critical from a credit risk 
management perspective. 

3. Position data matches the firms books and records but presents challenges as data must 
be collected from a variety of trading systems and across different locations. 

Once the data is collected, software is used to compute the risk measures using specific 
formulas, which are then combined with the data. Results are then published in documents 
for reporting by managers. All of these steps can be performed in numerous ways and can 
lead to several issues within the risk measurement system. We focus on two of these issues: 
the variability of the resulting measures and the appropriate use of data. 

Variability in risk measures, including VaR, is both a benefit and a problem. Managers have 
significant discretion and flexibility in computing VaR, and parameters can be freely used in 
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many different ways. This freedom in measuring VaR leads to two significant problems in 
practice: 

1 . Lack of standardization of VaR parameters. Given the variability in VaR measurements 
and managers’ discretion, parameters including confidence intervals and time horizons 
can vary considerably, leading to different measurements of VaR. 

2. Differences in VaR measurements. Even if VaR parameters were standardized, differences 
in measuring VaR could lead to different results. These include differences in the 
length of the time series used, techniques for estimating moments, mapping techniques 
(discussed in the next LO) and the choice of risk factors, decay factors in using 
exponentially weighted moving average (EWMA) calculations, and the number of 
simulations in Monte Carlo analysis. 

Varying parameters can lead to materially different VaR results. For example, one study 
using different combinations of parameters, all within standard practice, of portfolios 
consisting of Treasury bonds and S&P 500 index options indicated that VaR results differed 
considerably by a factor of six or seven times. A simple read of the different VaR models 
published in the annual reports of some of the larger banks can give an indication of the 
variability in their measurements. 



Risk Factor Mapping for VaR Calculations 



LO 46.3: Identify challenges related to mapping of risk factors to positions in 
making VaR calculations. 



Mapping refers to the assignment of risk factors to positions. Mapping choices can also 
impact VaR results. These could include practical choices among alternatives where each 
alternative has its benefits and disadvantages. For example, managers have a choice between 
cash flow mapping and duration-convexity mapping for fixed income securities. Cashflow 
mapping leads to greater accuracy (each cash flow is mapped to a fixed income security with 
an approximately equal discount factor); however, duration-convexity mapping requires fewer 
and less complex computations, reducing costs and potential data errors as well as model 
risks. 

It may also be difficult to locate data that addresses specific risk factors. One example is the 
previously widespread practice of mapping residential mortgage-backed securities (RMBS) 
or other securitized products to corporate credit spreads of the same rating. Because data 
on securitization spreads is typically not widely available, using a proxy risk factor of 
generic corporate bond spreads can be misleading, especially since previously lower spreads 
on securitizations widened considerably more during the recent financial crisis than did 
corporate spreads. This is an example of model risk and the inefficiency of VaR estimates in 
modeling large movements in market prices. 

Incorrect mapping to risk factors can create risks such as liquidity risk and basis risk. 
Liquidity risk arises from divergences in model and market prices. For example, convertible 
bonds can be mapped to risk factors including implied volatilities, interest rates, and credit 
spreads based on the theoretical (model) price of the convertible bond using a replicating 
portfolio. However, significant divergences in model and market prices are difficult to 
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capture with market data, and as a result, VaR estimates based on the replicating portfolio 
can considerably understate risk, creating liquidity risk. 

Basis risk is the risk that a hedge does not provide the required or expected protection. Basis 
risk arises when a position or its hedge is mapped to the same set of risk factors, which can 
be done when it is difficult to distinguish between two closely related positions. While this 
results in a measured VaR of zero, the positions have significant basis risk. Basis risk is also 
present in the risk modeling of securitization exposures where securitizations are hedged 
with corporate credit default swap (CDS) indices of similar ratings. 

Other strategies can also lead to misleading VaR estimates. For example, event-driven 
strategies have outcomes that are close to binary and depend on a specific event occurring, 
including mergers or acquisitions, bankruptcy, or lawsuits. For these trades, the range of 
results cannot be measured based on historical return data. Dynamic strategies are another 
example, where risk is generated over time rather than at a specific point in time. 



Credit Market in Early 2005 



LO 46.4: Identify reasons for the failure of the long-equity tranche, short- 
mezzanine credit trade in 2005 and describe how such modeling errors could have 
been avoided. 



Credit Trade Description and Modeling Issues 

Volatility in credit markets in the spring of 2005 caused significant modeling errors from 
both misinterpretation and incorrect application of models. Trades incurred losses as only 
certain dimensions of risks were hedged, while others were ignored. 

A popular strategy in credit markets for hedge funds, banks, and brokerages was to sell 
protection on the equity tranche and buy protection on the junior (mezzanine) tranche of 
the CDX.NAIG index, the investment-grade CDS index. As a result, the trade was long 
credit and credit spread risk on the equity tranche and short credit and credit spread risk 
on the mezzanine tranche. The trade was primarily executed on the IG3 and IG4 index 
series. The trade was designed to be default-risk neutral at initiation with equal credit spread 
sensitivities on the two legs. The motivation of the trade was to have a positively convex 
payoff profile with the two positions benefiting from credit spread volatility, while earning 
a positive net spread on the positions (positive carry). This allowed trades to have a position 
similar to delta-hedged, long option portfolios by receiving, rather than paying, time value. 

The hedge ratio for the delta-hedged portfolio then determined the dollar amount of the 
mezzanine to be shorted for every dollar of the long equity. In other words, the hedge ratio 
was the ratio of the profit and loss impact of a 1 bp widening of the CDX index on the 
equity and mezzanine tranches. The proper hedge ratio then allowed for the creation of a 
portfolio based on the CDX index that, at the margin, was default-risk neutral. The CDX 
trade benefited from a large change in credit spreads and essentially behaved like an option 
straddle on credit spreads with an option premium paid to the owner of the option. The 
hedge ratio for the CDX index was around 1.5 to 2 in early 2005, which resulted in a net 
flow of spread income to the long equity/short mezzanine trade. 
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The critical error in the trade, however, was that it was set up at a specific value of implied 
correlation. A static correlation was considered a critical flaw as the deltas that were used in 
setting up the trade were partial derivatives that ignored any changes in correlation. With 
changes in credit markets, changing correlations doubled the hedge ratio to close to 4 by 
the summer of 2005- As a result, traders now needed to sell protection on nearly twice the 
notional value of the mezzan in e tranche to maintain portfolio neutrality. Stated differently, 
as long as correlations remained static, the trade remained profitable. However, once 
correlations declined and spreads did not widen sufficiently, the trade became unprofitable. 

Therefore, while the model did not ignore correlation, it assumed a static correlation and 
instead focused on anticipated gains from convexity. The error could have been corrected 
by stress testing correlation or by employing an overlay hedge of going long, single-name 
protection in high default-probability names. 

Credit Market Example 

Problems in credit markets were already evident by the spring of 2005. The problems 
were largely related to the automobile industry, specifically the original equipment 
manufacturers (OEMs), including Ford, Chrysler, and General Motors (GM), which had 
been experiencing troubles for some time. OEMs were particularly important in the U.S. 
investment-grade bond market, and the emerging threat of a downgrade to junk status 
rattled markets. Although the OEMs were not directly part of the CDX.NA.IG index, 
several of their related finance companies were. Outside of OEMs, several auto parts 
manufacturers were included in two series of the index, the IG3 and IG4 indices. 

The immediate priority of the OEMs in early 2005 was to secure a relief from the United 
Auto Workers (UAW) union of health benefit commitments to retirees. When GM and 
the UAW were unable to reach an agreement in the spring of 2005, which coincided with 
the announcement of large losses for GM, GM and Ford were downgraded to junk status 
by S&P and Moody’s. This created a sharp widening of corporate spreads, including the 
spreads on the automotive finance companies and other industry names. Several auto parts 
manufacturers filed for Chapter 1 1 bankruptcy protection. As a result, the market was now 
anticipating the possibility of defaults in the IG3 and IG4 indices, and the probability of 
extreme losses became real. In addition, the convertible bond market was also experiencing 
a selloff that resulted in widening of spreads. The IG indices widened in line with the credit 
spread widening of the index constituents. The mark-to-market value and the implied 
correlation of the equity tranche dropped sharply. The implied correlation fell given that 
(1) the auto parts supplier bankruptcies were in the IG4 series, which led to close to 10% of 
the portfolio now close to default, and (2) the widening of the IG4 series was constrained 
by hedging, which led to a fall in correlation. Participants could hedge short credit positions 
in the equity tranche by selling credit protection on the mezzan in e tranche or the IG4 index 
series. Concurrently, the mezzanine tranche saw a small widening as market participants 
were covering their positions by selling protection on the mezzanine tranche (that is, they 
were taking on credit risk). These events led to the unwinding of the equity/ mezzanine 
tranche trade with the relative value trade experiencing large losses. 
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LO 46.5: Identify two major defects in model assumptions which led to the 
underestimation of systematic risk for residential mortgage backed securities 
(RMBS) during the 2008-2009 financial downturn. 



The subprime RMBS valuation and risk models have been widely employed by credit rating 
agencies to assign bond ratings, by traders and investors in bond valuations, and by issuers 
in structuring RMBS. During the 2007—2009 fin an cial downturn, two major defects in 
model assumptions became apparent: 

1. Assumption of future house price appreciation. The RMBS risk model generally assumed 
that future house prices would rise, or at least not fall, based on relatively few historical 
data points. When house prices actually did drop beginning in 2007, this incorrect 
assumption led to a significant underestimation of the potential default rates and 
systematic risk in RMBS because the credit quality of the loans was dependent on 
borrowers’ ability to refinance without additional equity. 

2. Assumption of low correlations. The RMBS model assumed low correlations among 
regional housing markets, implying that loan pools from different geographical regions 
were well diversified. When house prices declined, correlations increased and loan 
defaults were much higher than previously expected under the model stress scenarios. 

These two model errors led to a significant underestimation of systematic risk in subprime 
RMBS returns. When mortgage default rates began to increase, rating agencies were 
required to downgrade most issues, and by the end of 2009, approximately 45% of the 
initially AAA- rated U.S. RMBS had been downgraded. The downgrades of RMBS from 
their AAA-equivalent ratings shocked markets and exposed the degree to which systemic 
risk had been underestimated and mispriced. 

There have been several explanations proposed for the inaccuracy of the rating models. 

First, the compensation of rating agencies by bond issuers led to a potential conflict of 
interest scenario that resulted in lower ratings standards. Second, an increase in demand 
for higher rated bonds with a modestly higher yield resulted in searching for yield. Finally, 
mapping problems led to misleading risk measurement results, as highly rated securitized 
products were frequently mapped to highly rated corporate bond spread indices. This 
resulted in incorrect VaR estimates, as incorrect mappings indicated it would be unlikely 
that bonds would decline significantly in value. In reality, the most highly rated RMBS lost 
a significant portion of their value, declining close to 70% during the subprime crisis, while 
lower investment-grade RMBS lost virtually all of their value. 
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Two significant model errors in the RMBS valuation and risk models led to a significant 
underestimation of systematic risk in subprime RMBS returns during 2007—2009. First, 
the RMBS risk model assumed future house prices to rise or at least stay flat. The eventual 
decline in house prices starting in 2007 led to a significant underestimation of the potential 
default rates and systematic risk in RMBS. Second, the RMBS model assumed low 
correlations among regional housing markets. When house prices declined, correlations and 
loan defaults increased. 
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Concept Checkers 



1 . Due to a recently discovered error in its valuation model, Samuelson, Inc. had 
previously recorded certain trades as profitable even though the positions were 
unprofitable. The risk that best characterizes this error is: 

A. operational risk. 

B. liquidity risk. 

C. market risk. 

D. hedge risk. 

2. Duane Danning is a junior risk analyst at a large risk management firm. He has 
been asked to assess the firms risk modeling practices and evaluate potential ways 
in which errors could be introduced into models. In his analysis, Danning indicates 
that errors can be introduced into models through programming bugs and errors in 
VaR estimates but rarely through incorrect position mappings. Danning s analysis is 
most accurate with regard to: 

A. only programming bugs and incorrect position mappings. 

B. only programming bugs and errors in VaR estimates. 

C. only errors in VaR estimates. 

D. only incorrect position mappings. 

3. An advantage of duration mapping over cash flow mapping is that duration 
mapping: 

A. is more accurate than cash flow mapping, thus reducing mapping errors. 

B. uses cash flows that are mapped to specific fixed income securities without the 
use of approximations. 

C. uses more complex computations, thus reducing data errors and model risk. 

D. uses fewer risk factors, thus reducing data errors and model risk. 

4. A common trade during 2004 and 2005 was to sell protection on the equity tranche 
and buy protection of the mezza n ine tranche of the CDX.NAIG index. Which of 
the following statements regarding this trade is least accurate? 

A. The trade was set up to be default-risk neutral at initiation. 

B. The trade was short credit spread risk on the equity tranche and long credit 
spread risk on the mezzanine tranche. 

C. The main motivation for the trade was to achieve a positively convex payoff 
profile. 

D. The trade was designed to benefit from credit spread volatilities. 
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Which of the following two model errors in the RMBS valuation and risk models 

are considered to have contributed the most to a significant underestimation of 

systematic risk in subprime RMBS returns during 2007 - 2009 ? 

A. The assumption of future house price appreciation and the assumption of high 
correlations among regional housing markets. 

B. The assumption of future house price declines and the assumption of high 
correlations among regional housing markets. 

C. The assumption of future house price appreciation and the assumption of low 
correlations among regional housing markets. 

D. The assumption of future house price declines and the assumption of low 
correlations among regional housing markets. 
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Concept Checker Answers 



1 . A Recording trades as profitable that have, in feet, lost money is an example of operational risk. 

2. B Dannings analysis is most accurate with regard to only programming bugs and errors in VaR 

estimates. Incorrect position mappings can also lead to material errors in risk models. 

3. D Duration mapping (or duration-convexity mapping) requires the use of fewer risk factors 

and less complex computations, thus reducing costs, data errors, and model risks. Cash flow 
mapping results in greater accuracy of estimates, however, because cash flows are mapped to 
specific fixed income securities without the use of approximations. 

4. B The trade was long credit and credit spread risk on the equity tranche and short credit and 

credit spread risk on the mezzanine tranche. The other statements are accurate. 

5. C The two model errors considered to have contributed the most to a significant 

underestimation of systematic risk were (1) the assumption of future house price 
appreciation, and (2) the assumption of low correlations among regional housing markets. 
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Liquidity and Leverage 



Topic 47 

Exam Focus 

This topic analyzes the effects of liquidity and leverage on firm risk. Understand the 
distinction between transactions liquidity and funding liquidity, and the role banks play in 
providing liquidity. Also, be able to calculate a firms leverage ratio and the leverage effect, 
and know how to construct the economic balance sheet given trades such as buying stock 
on margin, selling stock short, and taking positions in derivatives. Finally, be able to explain 
tightness, depth, and resiliency as they relate to liquidity risk. 



Sources of Liquidity Risk 



LO 47.1: Define and differentiate between sources of liquidity risk, including 
transactions liquidity risk, balance sheet/funding liquidity risk and systemic risk. 



Liquidity is defined in many ways in financial markets. In general, an asset is liquid if it is 
“close to cash.” This means that the asset can be sold quickly, cheaply, and without moving 
the price “too much.” A market is liquid if positions can be unwound quickly, cheaply 
(i.e., at low transactions costs), and without undue price deterioration. 

Liquidity has two essential properties, which relate to two essential forms of risk. 
Transactions liquidity deals with financial assets and financial markets. Funding liquidity is 
related to an individuals or firms creditworthiness. Risks associated with liquidity include: 

• Transaction liquidity risk is the risk that the act of buying or selling an asset will result 
in an adverse price move. 

• F un ding liquidity risk or balance sheet risk results when a borrower’s credit position 
is either deteriorating or is perceived by market participants to be deteriorating. It also 
occurs when the market as a whole deteriorates. Under these conditions, creditors may 
withdraw credit or change the terms of credit (e.g., increase the required collateral for 
the loan). The position may, as a result, be unprofitable or may need to be unwound. 
Balance sheet risks are higher when borrowers fund longer term assets with shorter term 
liabilities. This is called a maturity mismatch. Maturity mismatching is often profitable 
for firms because short-term investors bear less risk and have a lower required rate of 
return. This means that short-term debt financing contributes less to the overall cost of 
capital of a borrowing firm. The incentive to maturity mismatch is even greater when 
the yield curve is upward sloping. However, funding long-term assets with short-term 
financing exposes the borrower to rollover risk (sometimes called cliff risk), the risk that 
the debt cannot be refinanced or can only be refinanced at escalating rates. 

• Systemic risk is the risk that the overall financial system is impaired due to severe 
financial stress. With this risk, credit allocation is impaired across the financial system. 
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Risks associated with liquidity are interrelated and can exacerbate problems. For example, 
if collateral requirements are increased, a counterparty may be forced to unwind a position 
early and at a potential loss. In this case, the increase in funding liquidity risk increases the 
transaction liquidity risk. 



Liquidity Transformation by Banks 



LO 47.2: Summarize the process by which a fractional-reserve bank engages in 
asset liability management. 



Commercial bank assets are typically longer-term and less liquid than bank liabilities 
(e.g., deposits). Wholesale funding (i.e., non-deposit sources of funding like commercial 
paper, bonds, and so on) is generally longer term but deposits are “sticky.” Depositors 
generally change banks only if impelled to by a move or some other extenuating 
circumstance. Deposits make up approximately 60% of bank liabilities in the United States. 

Banks only expect a fraction of deposits and other liabilities to be redeemed at any point 
in time. As a result, they do not hold all the deposits in liquid assets, but make loans 
with deposits instead. For example, a bank might take in $100 of deposits, hold $10 for 
redemptions, and lend the remaining $90. This is known as a fractional-reserve bank 
and the process of using deposits to finance loans is known as asset-liability management 
(ALM). 

The bulk of banks in history have been fractional- reserve banks. The alternative to a 
fractional-reserve system is one in which the bank uses owners’ money (i.e., equity) or 
money raised in capital markets to make loans, and keeps in reserve cash or highly liquid 
assets equal to its deposits. 

If withdrawals are greater than the bank’s reserves, the bank is forced into a suspension of 
convertibility. This means the bank will not be able to, as expected by depositors, convert 
deposits immediately into cash. In the extreme, there may even be a run on the bank. In the 
case of a bank run, depositors who are concerned about bank liquidity may attempt to get 
money out of the bank before other depositors and lenders. While rollover risk associated 
with other short-term financing is less extreme than bank runs, it does increase the fragility 
of banks. Higher capital reduces bank fragility. 

Frozen commercial paper markets in the wake of the Lehman Brothers failure illustrated the 
fragility of bank funding. Commercial funding couldn’t be placed and thus fell dramatically 
after the Lehman bankruptcy. It became nearly impossible to roll over longer term paper 
and very short-term paper rose to account for approximately 90% of the market. The 
Federal Reserve stepped in after the Lehman bankruptcy and created the Commercial Paper 
Funding Facility (CPFF) and the Asset-Backed Commercial Paper Money Market Mutual 
Fund Liquidity Facility (AMLF). 
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LO 47.3: Describe issues related to systematic funding liquidity risk with respect to 
leveraged buyouts, merger arbitrage hedge funds, and convertible arbitrage hedge 
funds. 



Systematic funding risks were apparent in many market sectors during the subprime 
mortgage crisis. As loans become shorter term, lenders and borrowers are exposed to greater 
liquidity risks. Borrowers must be able to refinance in order to repay short-term loans. The 
risk is systematic in that it affects borrowers and lenders at the same time. 

Liquidity issues arose during the recent financial crisis for a variety of investment strategies 
including: 

• Leveraged buyouts (LB Os). Leveraged loans became the dominate type of syndicated 
bank loans as LBOs and private equity grew before the crisis. Leveraged loans accounted 
for a large part of collateralized loan obligations (CLOs) and collateralized debt 
obligations (CD Os), which provided funding for LBOs. During the subprime mortgage 
crisis, LBO deals fell apart as funding dried up. Some loans, called “hung loans,” had not 
been distributed to investors and demand dried up. Banks incurred significant losses as 
prices fell sharply. 

• Merger arbitrage hedge funds. Hedge funds engaged in merger arbitrage experienced 
losses in the early stages of the subprime mortgage crisis. After a merger is announced, 
the targets stock price typically increases and the acquirers price sometimes declines 
due to increased debt. The merger arbitrage strategy exploits the difference between 
the current and announced acquisition prices. Hedge funds experienced large losses as 
mergers were abandoned when financing dried up. 

• Convertible arbitrage hedge funds. Convertible arbitrage strategies rely on leverage 
to enhance returns. Credit is extended by broker-dealers. When financing becomes 
unavailable due to market conditions, as experienced in the 2007-2009 financial 
crisis, convertible bond values drop precipitously. The funding liquidity problem was 
compounded by redemptions (i.e., a market liquidity problem). Also, because there is 
a limited clientele investing in convertible bonds, when the clientele develops a dislike 
for the product due to deteriorating market conditions, it is difficult to sell the assets 
without large price declines. The gap between convertible bond prices and replicating 
portfolios widened dramatically during the financial crisis, but it still did not bring 
arbitrage capital into the market. 

The broader point is that investment strategies, such as merger arbitrage, convertible 
arbitrage, and leveraged buyouts, are not only exposed to idiosyncratic risks, but also to 
systematic risks (i.e., systematic funding risks in this case). The risks are soft risks because 
they are difficult to relate to a particular series of asset returns. Instead, analysts must 
examine data on credit and liquidity spreads as well as quantitative and anecdotal data on 
the availability of credit in the market to understand the probability of a liquidity freeze. 



LO 47.4: Explain specific liquidity issues faced by money market mutual funds. 



Money market mutual fund (MMMF) investors can write checks and make electronic bank 
transfers. Like banks, MMMFs are obligated to repay investors/depositors on demand. In 
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general, underlying MMMF assets are high credit quality instruments with short maturities 
(e.g., a few weeks to a few months). However, the values of the underlying assets in the 
fund, despite their relative safety, are subject to change. As such, redemptions may be 
limited if asset values fall. The liabilities of MMMFs are, therefore, more liquid than their 
investments, similar to banks. 

MMMFs use a form of accounting called the amortized cost method, under the Securities 
and Exchange Commission’s (SEC) Rule 2a — 7. This means that MMMF assets do not 
have to be marked-to-market each day, as required for other types of mutual funds. The 
reason behind the difference is that extremely short-term securities are not likely to revalue 
based on changes in interest rates and credit spreads. MMMFs set a notional value of each 
share equal to $1.00. However, credit write-downs cannot be disregarded and it is possible 
for net asset values (NAVs) to fall below $1.00. This is known as breaking the buck. 

Liquidity risk can also cause NAVs to fall below $1.00. MMMFs, like depository 
institutions, are subject to runs. If a large proportion of investors try to redeem shares in 
adverse market conditions, the fund may be forced to sell money market paper at a loss. 
This can potentially result in write-downs and breaking the buck. 



Economics of the Collateral Market 



LO 47.5: Describe the economics of the collateral market and explain the 
mechanics of the following transactions using collateral: margin lending, repos, 
securities lending, and total return swaps. 



Collateral markets have two important purposes. First, they enhance the ability of firms to 
borrow money. Cash is only one type of asset that is borrowed. Securities are also borrowed 
in collateral markets. Second, collateral markets make it possible to establish short positions 
in securities. 

Firms with excess cash are more willing to lend at a low rate of interest if the loan is secured 
by collateral. Securities are used as collateral for secured loans. Collateralized loans can be 
short term or longer term. Overnight loans are often extended automatically. The full value 
of the securities is not lent in a collateralized loan. The difference is called a haircut. For 
example, a lender may be willing to lend $95 against $100 of collateral. 

Collateral values fluctuate and most collateralized borrowing arrangements require that 
variation margin be paid to make up the difference (called remargining). Variation margin 
is the additional funds a broker requests so that the initial margin requirement keeps 
up with losses. The haircut ensures that the value of the collateral can fall by a certain 
percentage (i.e., 5% in the previous example) and still leave the loan fully collateralized. The 
variation margin protects the lender. 

Collateralized loans are used to finance securities or other assets or trades. The securities 
pledged to one firm are often loaned or pledged again, hence the collateral circulates. This 
process is known as rehypothecation or repledging. 

The role of collateral has expanded in contemporary finance, hand-in-hand with the 
development of securitization. Securitization creates securities that can be pledged as 
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collateral for credit. Securitized assets generate cash flows, may appreciate in value, and can 
be used as collateral for other transactions. 



Life insurance companies own large portfolios of high-quality assets. They may use these 
assets for collateralized loans to borrow at low rates and reinvest at higher rates. Hedge 
funds pledge securities to finance portfolios at rates cheaper than unsecured loans. 



Markets for collateral take the following forms: 

• Margin loans. Margin loans are used to finance security transactions. The margin loan 
is collateralized by the security and is often provided by the broker intermediating the 
trade. The broker maintains custody of the securities in a street name account 

(i.e., securities are registered in the name of the broker rather than the owner). This 
structure makes it easier to seize and sell securities to meet margin calls. An added 
advantage to the broker is that securities in street name accounts can be used for other 
purposes, such as lending to other customers for short sales. In practice, the broker uses 
the customer s collateral to borrow money in the money market to provide margin loans 
to customers. The margin loan to the broker is collateralized by the repledged customer 
collateral. The Federal Reserve s Regulation T sets the initial margin requirement for 
securities purchases at 50 %. Cross-margin agreements are used to establish the net 
margin position of investors with portfolios of long and short positions. In general, 
cross margin involves transferring excess margin in one account to another account with 
insufficient margin, resulting in lower overall margin for the investor. 

• Repurchase agreements or repos. Repurchase agreements, also known as repos and RPs, 
are another form of collateralized short-term loans. They involve the sale of a security 
at a forward price agreed upon today. The interest on the loan is implied from the 
difference between spot and forward prices of the securities. While traditionally collateral 
had little or no credit risk (collateral was usually Treasury bills), today acceptable 
collateral encompasses whole loans, high-yield bonds, and structured credit products. 
Repos allow banks and other firms to finance inventories of structured credit products 
and allow for high investment grade ratings for senior tranches of asset-backed securities 
(ABSs) and collateralized debt obligations (CDOs). 

• Securities lending. Securities lending involves the loan of securities to another party 
in exchange for a fee, called a rebate. The lender of the securities continues to receive 
the dividends and interest cash flows from the securities. Lenders of securities are often 
hedge funds or other large institutional investors of equities. Securities are held in street 
name accounts to make them available for lending to traders who want to short stocks. 
Fixed income securities lending typically involves the loan of Treasury securities for cash. 
The cash is invested in a higher risk bonds and the investors objective is to earn the 
spread between the two. 

• Total return swaps. In a total return swap (TRS), one party pays a fixed fee in exchange 
for the total return (both income and capital gains) on a reference asset, typically a stock. 
The advantage is that the party paying the fee can earn the return from the underlying 
asset without owning the asset. The party providing the return (such as a hedge fund) is, 
in essence, short the asset. 




Professor’s Note: Securities lending, like repurchase agreements, are often structured 
as sales of securities, not loans of securities, so the holder of the collateral can 
rehypothecate the securities, or even sell them in a timely fashion if the loan is not 
repaid. 
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Leverage Ratio and Leverage Effect 



LO 47.6: Calculate a firms leverage ratio, describe the formula for the leverage 
effect, and explain the relationship between leverage and a firms return on equity. 



A firm’s leverage ratio is equal to its assets divided by equity (total assets / equity). That is: 

l = a = (e+d) = i+ d 

EE E 

For an all-equity financed firm, the ratio is equal to 1.0, its lowest possible value. As debt 
increases, the leverage ratio (i.e., multiplier) increases. For example, a firm with $100 of 
assets financed with $50 debt and $50 equity has a leverage ratio equal to 2.0 
($100 / $50 = 2). 

Return on equity (ROE) is higher as leverage increases, as long as the firm’s return on assets 
(ROA) exceeds the cost of borrowing funds. This is called the leverage effect. The leverage 
effect can be expressed as: 

r E = L r A - (L - l)r D 



where: 

r A - return on assets 
r E - return on equity 
r D = cost of debt 
L = leverage ratio 

It may help to think of this formula in words as follows: 



ROE = (leverage ratio x ROA) — [(leverage ratio — 1) x cost of debt] 



For a firm with a zero cost of debt, return on equity is magnified by the leverage factor; 
however, debt is not free. Thus, return on equity (ROE) increases with leverage, but the 
cost of borrowing, because there is more debt, also increases. The L — 1 factor multiplies the 
cost of debt by the proportion of the balance sheet financed with debt. For example, with a 
leverage ratio of 2, 50% of the balance sheet is financed with debt and 50% with equity. So 
for every $2 of assets, $ 1 comes from shareholders and $ 1 comes from borrowed funds. We 
multiply the cost of debt by 1 in this case. If the leverage ratio is 4, 25% is financed with 
equity and 75% is financed with debt. Thus, for every $4 of assets, $1 is equity and $3 is 
borrowed funds. In the formula, we multiply the cost of debt by 3. The higher the leverage 
factor, the bigger the multiplier but also the higher the debt costs. Leverage amplifies gains 
but also magnifies losses. That is why leverage is often referred to as a double-edged sword. 
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dr E I dL - t A - r D 



where: 

ch E = change in retained earnings 
dL = change in the leverage ratio 



This formula implies that, given a change in the leverage ratio, ROE changes by the 
difference between ROA and the cost of debt. 



The equity in the denominator of the leverage ratio depends on the entity. If it is a bank, it 
may be the book value of the firm. It might also be calculated using the market value of the 
firm. The net asset value (NAV) of a fund is the appropriate denominator for a hedge fund. 
The NAV reflects the current value of the investors’ capital in the fund. 



Example: Computing firm ROE (total assets - $2) 

Martin, Inc., a U.S. manufacturing company, has an ROA equal to 5%, total assets equal 
to $2, and equity financing equal to $1. The firm’s cost of debt is 2%. Calculate the firm’s 
ROE. 

Answer: 

r E = ^ r A _ - l)r D 

r E = [(2 / 1) x 5%] - [(2 - 1) x 2%] = 8% 



Example: Computing firm ROE (total asset = $4) 

Martin, Inc., a U.S. manufacturing company, has an ROA equal to 5%, total assets equal 
to $4, and equity financing equal to $ 1 . The firm’s cost of debt is 2%. Calculate the firm’s 
ROE. 

Answer: 

r E = L f A “ (L “ l) r D 

r £ = [(4 / 1) X 5%] - [(4 - 1) X 2%] = 14% 

Given a cost of debt of 2%, increasing the leverage factor from 2 to 4 increased the firm’s 
ROE from 8% to 14%. 
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Leverage is also influenced by the firms hurdle rate (i.e., required ROE). For example, 
assume a firms hurdle rate (i.e., ROE) is 10%, ROA equals 6%, and its cost of debt equals 
2%. The firm will choose a leverage ratio of 2.0. That is: 



ROE = (2 x 6%) - (1 x 2%) = 10% 



Explicit and Implicit Leverage 



LO 47.7: Explain the impact on a firms leverage and its balance sheet of the 
following transactions: purchasing long equity positions on margin, entering into 
short sales, and trading in derivatives. 



Purchasing stock on margin or issuing bonds are examples of using leverage explicitly to 
increase returns. However, there are other transactions that have implicit leverage. It is 
important to understand the embedded leverage in short positions and derivatives, such as 
options and swaps. By constructing economic balance sheets for investors and/or firms, it is 
possible to measure the implicit leverage of these transactions. 

Margin Loans and Leverage 

First, consider margin loans. The stock purchased with the margin loan is collateral for 
the loan. The haircut ( h ) is the borrower s equity and 1 — h is loaned against the market 
value of the collateral. The leverage is calculated as 1 / h. The Federal Reserve requires that 
an investor put up a minimum of 50% equity (i.e., h = 50%) in a stock purchase using 
borrowed funds. 

First, assume that a firm has $100 cash invested by the owners (i.e., no borrowed funds). 
The balance sheet in this case is: 



Assets 




Liabilities , 


and Equity 






Debt 


$0 


Cash 


$100 


Equity 


$100 


Total assets 


$100 


TL and OE 


$100 


If the firm uses 


the cash to purchase stock, the balance i 


Assets 




Liabilities 


and Equity 






Debt 


$0 


Stock 


$100 


Equity 


$100 


Total assets 


$100 


TL and OE 


$100 



Thus, the leverage ratio is equal to 1 (i.e., $100 / $100 or 1.0 / 1.0) 
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Next, assume that the firm uses 50% borrowed funds and invests 50% (i.e., h = 50%) 
equity to buy shares of stock. Immediately following the trade, the margin account balance 
sheet has 50% equity and a $50 margin loan from the broker. That is: 



Assets 




Liabilities 


and Equity 






Margin loan 


$50 


Stock 


$100 


Equity 


$50 


Total assets 


$100 


TL and OE 


$100 


The full economic balance sheet as a result of the borrowed funds (remember, owners put in 


$ 1 00 of equity 


initially so 


the firm now 


has $100 of stock and $50 of cash) is: 


Assets 




Liabilities 


and Equity 


Cash 


$50 


Margin loan 


$50 


Stock 


$100 


Equity 


J100 


Total assets 


$150 


TL and OE 


$150 


Thus, the leverage ratio has increased to 1.5 (i.e., $150 / $100 or 1 / 0.667). Note that the 
broker retains custody of the stock to use as collateral for the loan. 



Short Positions and Leverage 

In a short trade, the investor borrows the shares of stock and sells them. The transaction 
lengthens the balance sheet because the cash generated from the short sale along with the 
value of the borrowed securities appear on the balance sheet. 

Assume the firm borrows $ 100 of stock and sells it short. The firm has an asset equal to the 
proceeds from selling the stock and a liability equal to the value of the borrowed shares. 
However, the firm cannot use the cash for other investments as it is collateral. It ensures that 
the stock can be repurchased and returned to the lender. It is in a segregated short account. 
In the event that the stock price increases rather than decreases, the firm must also put $50 
in a margin account. 

Immediately following the trade, the margin account and short account has $50 equity and 
a $50 margin loan from the broker. 



Assets 




Liabilities and Equity 


$150 due from broker: 








Margin 


$50 


Borrowed stock 


$100 


Short sale proceeds 


$100 


Equity 


$50 


Total assets 


$150 


TL and OE 


$150 
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The firms full economic balance sheet given the short sale is: 



Assets Liabilities and Equity 



Cash 


$50 


Borrowed stock 


$100 


Due from broker 


$150 


Equitv 


$100 


Total assets 


$200 


TL and OE 


$200 



Thus, the leverage ratio has increased to 2.0 (i.e., $200 / $100 or 1 / 0.50). The leverage is 
higher in this case than in the previous margin example because the full value of the stock 
is borrowed in a short transaction. Leverage is inherent in the short position but is a choice 
in the long position. The firm only borrows 50% of the balance of the stock in the long 
position. 

If the short position plays a hedging role in the portfolio, the position will reduce market 
risk. This means that leverage will overstate the overall risk because it ignores the potential 
risk reducing benefits of the short positions. As such, a distinction must be made between 
gross and net leverage. Gross leverage is the value of all the assets, including cash generated 
by short sales, divided by capital. Net leverage is the ratio of the difference between the long 
and short positions divided by capital. 

Derivatives and Leverage 

Derivatives allow an investor to gain exposure to an asset or risk factor without actually 
buying or selling the asset. Derivatives also allow investors to increase leverage. Although 
derivatives are generally off-balance sheet, they should be included on the economic balance 
sheet as they affect an investors returns. Derivatives are synthetic long and short positions. 
To estimate the economic balance sheet, find the cash-equivalent market value for each 
type of derivative. Derivatives include: 

• Futures, forward contracts, and swap contracts. These contracts are linear and 
symmetric to the underlying asset price. The amount of the underlying instrument 
represented by the derivative is set at the initiation of the contract so values can be 
represented on the economic balance sheet by the market value of the underlying asset. 
These contracts have zero net present values (NPVs) at initiation. 

* Option contracts. These contracts have a non-linear relationship to the underlying 
asset price. The amount of the underlying represented by the option changes over time. 
The value can be fixed at any single point in time by the option delta. Thus, on the 
economic balance sheet, the cash equivalent market values can be represented by the 
delta equivalents rather than the market values of the underlying assets. These contracts 
do not have zero NPVs at initiation because the value is decomposed into an intrinsic 
value (which may be zero) and a time value (which is likely not zero). 

In this next example, the counterparty is assumed to be the prime broker or broker-dealer 
executing the positions. This means that margin will be assessed by a single broker on a 
portfolio basis. 
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First, assume the firm enters a 1 -month currency forward contract and is short $100 against 
the euro and the 1 -month forward exchange rate is $1.25 per euro. The balance sheet is: 



Assets 


Liabilities and Equity 


$100 equivalent of €80 bank deposit 


Broker loan $100 



Now, assume the firm buys a 3 -month at-the-money call option on a stock index with 
an underlying index value of $100. The calls delta is currently 50%. The transaction is 



equivalent to using a $50 broker loan to 


buy $50 of the stock index. That is: 


Assets 


Liabilities and Equity 


$50 long index position $50 


Broker loan $50 


Next, assume the firm enters a short equity position via a total return swap (TRS). The firm 
pays the total return on $100 of ABC stock and the cost of borrowing the ABC stock 
(i.e., the short rebate). This is equivalent to taking a short position in ABC. Assuming the 
market price of ABC is $100, we have: 


Assets 


Liabilities and Equity 


$ 1 00 due from broker $ 1 00 

(proceeds from short sale) 


Borrowed ABC stock $ 1 00 



Finally, assume the firm adds short protection on company XYZ via a 5-year credit default 
swap (CDS) with a notional value of $100. This position is equivalent to a long position in 
a par- value 5-year floating rate note (FRN) financed with a term loan. 

The firms combined economic balance sheet that includes all of the derivatives positions is: 



Assets 




Liabilities and Equity 


Cash 


$50 


Short-term broker loan 


$150 


Due from broker 


$150 






$50 margin 








$100 short sale proceeds 




Term loan 


$100 


Equivalent of €80 bank deposit 


$100 


Borrowed ABC stock 


$100 


Long equity index 


$50 






XYZ FRN 


$100 


Equitv 


$100 


Total assets 


$450 


TL and OE 


$450 



The firm has increased its leverage to 3.5 in its long positions. The long positions combined 
with the short position (the ABC TRS) means the firm has gained economic exposure to 
securities valued at $450 using $50 of cash. 

Notice that computing leverage is complex when derivatives are used. Also, correctly 
interpreting leverage is important since risk may be mitigated if short positions are used 
to hedge. For example, currency and interest rate risks can be hedged accurately. However, 
the positions are of the same magnitude as the underlying assets. If the positions are carried 
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on the economic balance sheet, leverage will be overstated and other material risks in the 
portfolio may be ignored. 



Sources of Transactions Liquidity Risk 



LO 47.8: Identify the main sources of transactions liquidity risk. 



An asset is liquid if it resembles money. That is, it can be exchanged for goods or services 
quickly and at a certain value. However, assets have to be liquidated in order to buy goods 
and services because we do not have a barter economy. 

Transactions liquidity implies that an asset can be bought or sold without moving its price. 
However, large transactions may move an asset s price because they create a short-term 
imbalance between supply and demand. Transactions liquidity risk is fundamentally related 
to the costs of searching for a counterparty, the institutions required to assist in that search, 
and the costs of inducing a counterparty to hold a position. 

In order to understand transactions liquidity risk, it is important to understand market 
microstructure fundamentals. These fundamentals are: 

• Trade processing costs. The first cost is associated with finding a counterparty in a 
timely fashion. In addition, processing costs, clearing costs, and the costs of settling 
trades must also be considered. These costs do not typically increase liquidity risk 
except in circumstances, either natural or man-made, where the trading infrastructure is 
affected. 

• Inventory management. Dealers provide trade immediacy to market participants. The 
dealer must hold long or short inventories of assets and must be compensated by price 
concessions. This risk is a volatility exposure. 

• Adverse selection. There are informed and uninformed traders. Dealers must 
differentiate between liquidity or noise traders and information traders. Information 
traders know if the price is wrong. Dealers do not know which of the two are attempting 
to trade and thus must be compensated for this lemons risk through the bid-ask spread. 
The spread is wider if the dealer believes he is trading with someone who knows more 
than he does. However, the dealer does have more information about the flow of trading 
activity (i.e., is there a surge in either buy or sell orders). 

• Differences of opinion. It is more difficult to find a counterparty when market 
participants agree (e.g., the recent financial crisis where counterparties were afraid to 
trade with banks because everyone agreed there were serious problems) than when they 
disagree. Investors generally disagree about the correct or true price on an asset and 
about how to interpret new information about specific assets. 

These fundamentals differ across different types of market organizations. For example, in 
a quote-driven system, common in over-the-counter (OTC) markets, market makers are 
expected to publicly post 2-way prices or quotes and to buy or sell at those prices wit h i n 
identified transaction size limits. In contrast, order-driven systems, typically found on 
organized exchanges, are more similar to competitive auction models. Typically the best bids 
and offers are matched throughout the trading session. 

Liquidity risks are introduced when bid-ask spreads fluctuate, when the traders own actions 
impact the equilibrium price of the asset (called adverse price impact) and when the price 
of an asset deteriorates in the time it takes a trade to get done (called slippage). 
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In general, regulators have focused more on credit and market risks and less on liquidity 
risk. Liquidity risk is difficult to measure. However, since the financial crisis, more attention 
is being paid to measuring liquidity risks in a firm. 



Transactions Cost 



LO 47.9: Calculate the expected transactions cost and the 99 percent spread risk 
factor for a transaction. 



Assuming that daily changes in the bid-ask spread are normally distributed, the 99% 
confidence interval on the transactions cost in dollars is: 



+/- P x Vi{s + 2.33a.) 
where: 

P = an estimate of the next day asset midprice, usually set to P, the most recent price 
observation 

s = expected or typical bid-ask spread calculated as: (ask price — bid price) / midprice 
a - sample standard deviation of the spread 

This confidence interval estimates the expected transactions costs in dollar terms. The 
+ 2.33cr s ) component is referred to as the 99% spread risk factor. 



Example: Computing transactions cost 

Brieton, Inc., recently traded at an ask price of $100 and a bid price of $99. The sample 
standard deviation of the spread is 0.0002. Calculate the expected transactions cost and 
the 99% spread risk factor for a transaction. 

Answer: 

midprice = (100 + 99) / 2 = 99.50 
s = (100 -99)/ 99-5 = 0.01003 

transactions cost = 99.50 x V^[0.01005 + 2.33(0.0002)] = $0,523 

spread risk factor = y 2 [0.01005 + 2.33(0.0002)] = 0.005258 

Note that in this example, we use the current midprice as the estimate for the next day 
asset midprice. 
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Adjusting VaR for Position Liquidity 



LO 47.10: Calculate the liquidity-adjusted VaR for a position to be liquidated over 
a number of trading days. 



Liquidity-adjusted value at risk (LVaR) is a tool used to measure the risk of adverse price 
impact. The trader will often liquidate the position over a period of days in order to ensure 
an orderly liquidation of the position. 




Professor’s Note: The actual calculation of liquidity-adjusted VaR ( using constant 
and exogenous spread approaches) was shown in Topic 44. Here we discuss how VaR 
may be overstated when adjusting for different time horizons (via the square root of 
time rule) since this adjustment does not account for the liquidation of positions over 
the time period of analysis. 



Adjusting VaR for liquidity requires an estimate of the number of days it will take to 
liquidate a position. The number of trading days is typically denoted T. Assuming the 
position can be divided into equal parts across the number of trading days and liquidated 
at the end of each trading day, a trader would face a 1-day holding period on the entire 
position, a 2-day holding period on a fraction (T — 1) / T of the position, a 3-day holding 
period on a fraction (T — 2) / T of the position, and so on. The 1-day position VaR adjusted 
by the square root of time is estimated for a given position as: 



VaR t x v/T 



However, this formula overstates VaR for positions that are liquidated over time because it 
assumes that the whole position is held for T days. To adjust for the fact that the position 
could be liquidated over a period of days, the following formula can be used: 



VaR t x 



f( l + T)(l + 2T) 
6T 



For example, if the position can be liquidated in four trading days (T = 4), the adjustment 
to the overnight VaR of the position is 1.3693, which means we should increase VaR by 
37%. This is greater than the initial 1-day VaR, but less than the 1 -day VaR adjusted by the 
square root of T. 
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LO 47. 1 1 : Define characteristics used to measure market liquidity, including 
tightness, depth and resiliency. 



Factors such as tightness, depth, and resiliency are characteristics used to measure market 

liquidity. 

• Tightness (or width) refers to the cost of a round-trip transaction, measured by the 
bid-ask spread and brokers 5 commissions. The narrower the spread, the tighter it is. The 
tighter it is, the greater the liquidity. 

• Depth describes how large an order must be to move the price adversely. In other words, 
can the market absorb the sale? The market can likely absorb a sale by an individual 
investor without an adverse price impact. However, if a large institution sells, it will 
likely adversely impact the price. 

• Resiliency refers to the length of time it takes lumpy orders to move the market away 
from the equilibrium price. In other words, what is the ability of the market to bounce 
back from temporary incorrect prices? 

Both depth and resiliency affect how quickly a market participant can execute a transaction. 



Hedge Fund Liquidity Management 



LO 47.12: Explain the challenges posed by liquidity constraints on hedge funds 
during times of financial distress. 



Redemption requests, especially in times of market stress, may require hedge fund managers 
to unwind positions rapidly, exposing the fund to transactions liquidity risk. If this happens 
to many funds at once, fire sales may result. Hedge funds manage liquidity via: 

• Cash. Cash can be held in money market accounts or Treasury bills and unencumbered 
liquidity. Cash is not wholly without risk, however, because money market funds may 
suspend redemptions in times of stress or crisis, and broker balances are at risk if the 
broker fails. 

• Unpledged assets. Unpledged assets, also called assets in the box, are assets not currently 
being used as collateral. They are often held with a broker. Price volatility of the assets 
affects their liquidity. Only Treasury securities, and more specifically Treasury bills, may 
be used as collateral during a financial crisis. Even government agency securities were not 
sufficient collateral during the 2007—2009 financial crisis. Unpledged assets can be sold, 
rather than pledged, to generate liquidity. However, in times of market stress, asset prices 
are often significantly depressed. 

• Unused borrowing capacity. This is not an unfettered source of liquidity as unused 
borrowing capacity can be revoked by counterparties by raising haircuts or declining to 
accept pledged assets as collateral when it is time to rollover the loan. These loans are 
typically very short term and credit can, as it did during the 2007—2009 financial crisis, 
disappear quickly. 

During the crisis, a systemic risk event, hedge funds that had not experienced large losses 
still faced a liquidity crisis as investors, seeking liquidity themselves, issued redemption 
requests. 
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LO 47.1 

Liquidity has two essential properties, which relate to two essential forms of risk. 
Transactions liquidity deals with financial assets and financial markets and is related to the 
ability to sell an asset quickly, cheaply, and without moving the price too much. Funding 
liquidity is related to in dividual’s or firms creditworthiness. 



LO 47.2 

Banks only expect a fraction of deposits and other liabilities to be redeemed at any point in 
time. As a result, they do not hold all deposits in liquid assets, but make loans with deposits 
instead. This is known as a fractional-reserve bank and the process of using deposits to 
finance loans is known as asset-liability management (ALM). 



LO 47.3 

Systematic funding risks were apparent in many market sectors during the subprime 
mortgage crisis. Liquidity issues arose during the recent financial crisis for a variety of 
investment strategies. 



LO 47.4 

Money market mutual funds (MMMFs) have net asset values (NAVs) equal to $1.00. 
However, credit write-downs can result in net asset values (NAVs) falling below $1.00. This 
is known as breaking the buck. Liquidity risk can also cause NAVs to fall below $1.00. 



LO 47.5 

Collateral markets enhance the ability of firms to borrow money. They also make it possible 
to establish short positions in securities. Cash and securities may be borrowed in the market 
for collateral. 

Firms with excess cash are more willing to lend at a low rate of interest if the loan is secured 
by collateral. The full value of the securities is not lent. The difference is called a haircut. 

Collateralized loans are used to finance securities or other assets or trades. The securities 
pledged to one firm are often loaned or pledged again, hence the collateral circulates. This 
process is known as rehypothecation or repledging. 
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LO 47.6 

A firm’s leverage ratio is equal to its assets divided by equity. That is: 

L= A = (E+p) = i + p 
EE E 

Return on equity (ROE) is higher as leverage increases, as long as the firm’s return on assets 
(ROA) exceeds the cost of borrowing funds. This is called the leverage effect. The leverage 
effect can be expressed as: 

r E = L f A - l) r D 



LO 47.7 

There is embedded leverage in short positions and derivatives such as options and swaps. 
Economic balance sheets can be constructed to help investors and/or firms measure the 
implicit leverage of these transactions. 



LO 47.8 

Transactions liquidity implies that an asset can be bought or sold without moving its 
price. Transactions liquidity risk is fundamentally related to the costs of searching for a 
counterparty, the institutions required to assist in that search, and the costs of inducing a 
counterparty to hold a position. 

To understand transactions liquidity risk, one must understand market microstructure 
fundamentals. Trade processing costs, inventory management, adverse selection (i.e., dealing 
with informed versus uninformed traders), and differences of opinions regarding asset prices 
affect transactions liquidity. 



LO 47.9 

Assuming that daily changes in the bid-ask spread are normally distributed, the 99% 
confidence interval on the transactions cost in dollars is: 



+/— P x Vi(s + 2.33 ct s ) 

The spread risk factor is equal to Vi { s + 2.33 ct s ). 



LO 47.10 

Liquidity-adjusted VaR is a tool used to measure the risk of adverse price impact. Traders 
will often liquidate positions over a period of days in order to ensure an orderly liquidation 
of the position. 
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L0 47.ll 

Factors such as tightness, depth, and resiliency are characteristics used to measure market 
liquidity. Tightness (or width) refers to the cost of a round-trip transaction, measured by 
the bid-ask spread and brokers’ commissions. Depth describes how large an order must be 
to move the price adversely. Resiliency refers to the length of time it takes lumpy orders to 
move the market away from the equilibrium price. 



LO 47.12 

Hedge funds manage liquidity via cash, unpledged assets, and unused borrowing capacity. 

In times of market stress, redemption requests may require hedge fund managers to unwind 
positions rapidly, exposing the fund to transactions liquidity risk. If this happens to many 
funds at once, fire sales may result. 
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Concept Checkers 



1 . Jackson Grimes, a trader for Glenn Funds, works on the repurchase agreement 
(repo) desk at his firm. Markets have been highly volatile but Glenn Funds has a 
large capital base and is sound. Grimes reports to the CEO that in the last month, 
the firm Glenn Funds borrows from has been consistently increasing collateral 
requirements to roll over repos. From the perspective of Glenn Funds, this 
represents: 

A. systematic risk. 

B. transactions liquidity risk. 

C. balance sheet risk. 

D. maturity transformation risk. 

2. Chris Clayton, an analyst for a private equity fund, noticed that merger arbitrage 
strategies at several hedge funds experienced large losses in late 2007 to early 2008. 
These losses were likely due to: 

A. abandoned merger plans due to a lack of available financing. 

B. target prices falling precipitously due to stock market corrections. 

C. acquirers filing for bankruptcy as the subprime mortgage crisis unfolded. 

D. idiosyncratic risks surrounding the merger arbitrage strategy. 

3. With respect to the valuation of money market mutual fund (MMMF) assets, funds: 

A. are not required to mark-to-market the underlying assets daily. 

B. must reflect changes in the values of underlying assets that are the result of 
changes in credit risks but may ignore value changes that are the result of 
changes in interest rates. 

C. will set the notional values of each of the underlying assets equal to $1.00. 

D. are not allowed to invest in any asset with a rating below AAA because asset 
values must not fluctuate outside of a 10% range around the historical value in 
order to keep the notional value equal to $1.00. 

4. Charleston Funds intends to use leverage to increase the returns on a convertible 
arbitrage strategy. The return on assets (ROA) of the strategy is 8%. The fund has 
$1,000 invested in the strategy and will finance the investment with 75% borrowed 
funds. The cost of borrowing is 4%. The return on equity (ROE) is closest to: 

A. 4%. 

B. 32%. 

C. 20%. 

D. 12%. 

5. Brett Doninger recently placed an order to sell a stock when the market price was 
$42. 12. The market was volatile and, by the time Doningers broker sold the stock, 
the price had fallen to $41.88. In the market, this phenomenon is known as: 

A. adverse selection. 

B. transactional imbalance. 

C. slippage. 

D. the spread risk factor. 
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Concept Checker Answers 



1 . C Funding liquidity risk or balance sheet risk results when a borrower s credit position is either 

deteriorating or is perceived by market participants to be deteriorating. It also occurs when 
the market as a whole deteriorates. Under these conditions, creditors may withdraw credit 
or change the terms of credit. In this case, the lender is increasing the haircut and is thus 
changing the terms of credit. Glenn Funds creditworthiness does not actually have to decline 
for a lender to withdraw credit or change the terms of credit. 

2. A Systematic funding risks were apparent in many market sectors during the subprime 

mortgage crisis. Hedge funds engaged in merger arbitrage experienced losses in the early 
stages of the subprime mortgage crisis. After a merger is announced, the targets stock 
price typically increases and the acquirers price sometimes declines due to increased debt. 
The merger arbitrage strategy exploits the difference between the current and announced 
acquisition prices. Hedge funds experienced large losses as mergers were abandoned when 
financing dried up. 

3. A MMMFs use a form of accounting called the amortized cost method, under the Securities 

and Exchange Commissions (SEC) Rule 2a — 7. This means that MMMF assets do not have 
to be marked-to-market each day, as required for other types of mutual funds. However, the 
values of the underlying assets in the fund, despite their relative safety, are subject to change. 
As such, redemptions may be limited if asset values fall. 

4. C debt = $1,000 x 0.75 = $750 

leverage ratio = total assets / equity 
leverage ratio = $1,000 / $250 = 4 

r E = ^ r A - (L - l) r D 
where: 

r A = return on assets 
r E = return on equity 
r^ = cost of debt 
L = leverage ratio 

return on equity - 4(8%) — [(4 — 1)(4%)] = 32% — 12% - 20% 

5. C Liquidity risks are introduced when bid-ask spreads fluctuate, when the trader s own actions 

impact the equilibrium price of the asset (called adverse price impact), and when the price of 
an asset deteriorates in the time it takes a trade to get done. When the price deteriorates in 
the rime it takes to get a trade done, it is called slippage. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Repurchase Agreements and 
Financing 



Topic 48 

Exam Focus 

Repurchase agreements, or repos, are short-term financing vehicles to borrow/lend fu n ds on 
a secured basis. The most common repos are for overnight lending. This topic discusses the 
mechanics of repos, including settlement calculations, the motivations of market participants 
for entering into repos, as well as the risks (credit risk and liquidity risk) that arise from their 
use. It also discusses collateral types used in repos, including general collateral and special 
collateral. For the exam, focus on the characteristics of repo transactions and the primary 
motivations for using repos. Understanding these motivations should give you a good 
indication of how and why repos are used in the market, what risks repos hedge, what risks 
arise from repo trading, and how changes in the market environment affect repos. 



Mechanics of Repurchase Agreements 



LO 48.1: Describe the mechanics of repurchase agreements (repos) and calculate 
the settlement for a repo transaction. 



Economically, a repurchase agreement (i.e., repo) is a short-term loan secured by collateral. 
Mechanically, it is a contract between two parties where one party sells a security at a 
specified price with a commitment to buy back the security at a future date at another 
specified (higher) price. The difference between the sell and buy prices of the security is the 
implied interest (i.e., return) on the transaction. Repos are used by both borrowers needing 
short-term funds and by lenders needing short-term investments or access to hard-to-find 
collateral. 

The term repo refers to the transaction from the borrowers side; that is, from the side that 
sold the security with a promise to buy it back. When we examine the same transaction 
from the lender’s side, the transaction is referred to as a reverse repurchase agreement 
(i.e., reverse repo). Figures 1 and 2 illustrate an example of a repo trade. 

Figure 1: Repo Initiation 



$10 million face value ABC bond 



Counterparty A 



< 



> 



Counterparty B 



$11,000,000 
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Suppose that on May 1, counterparty A wishes to borrow $11 million for 31 days. 

It therefore sells ABC bonds with a face value of $ 1 0 million and a market value of 
$11 million to counterparty B, with a contract price of $ 1 1 million to reflect the bond’s 
market value. Concurrently, counterparty A agrees to buy back the bond in 31 days at the 
contract price plus 0.3% interest (30 basis points). 




Professor’s Note: Interest rates for repos are always quoted at an annualized rate, 
and the convention for most money market securities is to use an actual/360 day 
count. 



The repurchase price in this example is computed as follows: 

0.3% X 31) 



$11,000, 000 x 



1 + 



360 



= $11,002,841.67 



As illustrated in Figure 2, on the June 1 termination of the repo trade, counterparty A will 
purchase back the $10 million face value ABC bond for $1 1,002,842. 



Figure 2: Repo Termination (Settlement) 



$ 10 million face value ABC bond 




Counterparty A 


< 

> 


Counterparty B 






$11,002,842 






LO 48.2: Explain common motivations for entering into repos, including their use 
in cash management and liquidity management. 



Borrowers in Repos 

From the perspective of the borrower , repos offer relatively cheap sources of obtaining short- 
term funds. Relative to unsecured borrowing, repos allow the borrower to obtain funds at 
favorable rates because lenders are willing to accept lower returns (relative to unsecured 
transactions) in favor of the security of collateral. 

Bond Financing 

Repos can also be used to obtain cash to finance a long security position. Consider a 
financial institution in the previous example (as counterparty A) that just purchased the 
same $ 1 0 million face value ABC bond from a client in hopes of selling it to another 
investor for a profit. Until the new buyer is found, however, the financial institution needs 
to finance the purchase of the bond. It can do so by borrowing cash through an overnight 
repo trade (from counterparty B) and pledging the ABC bond as collateral, subject to any 
applicable haircuts. If the financial institution cannot immediately find a buyer, it needs 
to roll/ renew its position. If the initial repo trade and the subsequent rolls are transacted 
with the same counterparty, the trade flow is similar to Figure 1 . If the repo is renewed/ 
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rolled with a different counterparty, the financial institution first needs to unwind the initial 
trade (with counterparty B) and then enter into a new repo trade with another counterparty 
(counterparty C). This is illustrated in Figure 3. 

Similar to financing a bond purchase, the financial institution may also use repos to finance 
proprietary positions or to fina n ce its inventory in order to make markets. 



Figure 3: Back-to-Back Repo Trades 

$ 1 0 million face $ 1 0 million face 

value ABC bond value ABC bond 



Counterparty C 






> 



Counterparty A 



< 



> 



Counterparty B 



cash 



cash 



Liquidity Management 



Firms can borrow funds in different ways. They can issue equity capital or issue long-term 
or short-term debt, either on a secured or unsecured basis. Repos offer secured short-term 
financing; however, they are considered less stable given that repos need to be repaid within 
a short time period, and they are subject to swings in market conditions and sentiment. By 
contrast, equity financing is considered the most stable financing form given that the issuing 
firm has no obligation to pay dividends and equity financing does not need to be paid back. 
However, given its stability, equity financing is the most expensive and requires the highest 
expected return. By contrast, repo financing is cheaper but less stable. 

Firms need to balance this tradeoff between the costs of funding among the various 
alternatives and potentially being left without financing. This is referred to as liquidity 
management. 



Lenders in Repos 

From the perspective of the lender , repos can be used for either investing or for financing 
purposes as part of an entity’s cash management or financing strategies. 

Cash Management (Repos as Investment Vehicles) 

Lenders use repos (taking the reverse repo side) for investing when they hold cash either for 
liquidity or safekeeping reasons and need short-term investing opportunities to generate 
return on their surplus cash position. For example, money market mutual funds hold 
cash for safekeeping on behalf of investors and therefore need low risk, short maturity 
investments to generate return rather than holding idle cash. Municipalities, on the 
other hand, have significant surplus cash generated from tax revenues. Municipalities are 
prohibited from investing in high-risk investments, and repos offer a low risk, collateral- 
secured investment opportunity. 

Investors look for liquidity and tend to favor very short-term positions in overnight 
repos, which provide significant flexibility to the investor. Following each overnight repo 
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transaction, the investor could re-evaluate its decision whether to continue lending cash. 
Investors may also transact in open, repos by lending for a day under a contract that renews 
each day until it is canceled. Repos could have longer maturities out to several months, 
although typically the longer the maturity, the lower the overall demand. 

In addition to liquidity, investors also prefer higher quality collateral. Repo collateral is 
generally limited to high-quality securities, including securities issued or guaranteed by 
governments and government-sponsored entities. Because the lender is faced with the risk of 
a decline in collateral value during the term of the repo transaction, repo agreements often 
require collateral haircuts. A haircut refers to discounting the value of the collateral posted 
in relation to its risk. In our earlier repo trade example, counterparty B may only lend 
$10.5 million against the $11 million market value of the ABC bond collateral received. 
Finally, repo transactions are also subject to margining and (daily) margin calls. A margin 
call requires a borrower to post additional collateral in a declining market, but it also allows 
the borrower to withdraw excess collateral in up markets. 

Short Position Financing (Repos as Financing Vehicles) 

Lenders may also use repos (as the reverse repo side) to finance short positions in bonds. 
Consider an investment management firm that has a view that interest rates will rise and 
bond prices will fall. It can take advantage of this view by obtaining the desired bond 
collateral through lending cash in a reverse repo trade. It would then short sell the bond 
received through the reverse repo and buy it back at the market price at a later date, hoping 
to benefit from the trade from a fall in prices. The transaction flows would be similar to 
what we previously illustrated in Figure 1 and Figure 2, with the investment management 
firm as counterparty B. 



Counterparty Risk and Liquidity Risk 



LO 48.3: Explain how counterparty risk and liquidity risk can arise through the 
use of repo transactions. 



Repo transactions involve the exchange of cash as well as the exchange of collateral. As a 
result, both counterparty risk (credit risk) and liquidity risk are present. 

Counterparty risk is the risk of borrower default or non-payment of its obligations, and it 
arises because the lender is exposed to the risk of a failure by the borrower to repay the repo 
loan and interest. Given, however, that repo loans are secured by collateral, this makes the 
lender much less vulnerable to a decline in the creditworthiness of the borrower. The lender 
can recover any amounts owed by simply selling the collateral. As a result, because repos are 
generally very short-term transactions secured by collateral, counterparty (credit) risk is less 
of a concern. 

Liquidity risk is the risk of an adverse change in the value of the collateral and can be of 
particular concern to the lender. Even if the lender is less concerned with the credit risk 
of a counterparty given the security of collateral, the lender is still exposed to the risk 
of collateral illiquidity and to the value of the collateral declining during the repo term. 
Especially during times of market turbulence (as we will see in next LO) , the value of 
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collateral can decline significantly and its liquidity can dry up. This risk can be mitigated 
with the use of haircuts, margin calls, reducing the term of the repo, and accepting only 
higher quality collateral. 



Repos During the Credit Crisis 



LO 48.4: Assess the role of repo transactions in the collapses of Lehman Brothers 
and Bear Stearns during the 2007-2008 credit crisis. 



Prior to the 2007—2009 credit crisis, the repo market was considered relatively liquid with 
stable demand by both borrowers and lenders. Borrowers often posted weaker quality 
collateral, including corporate bonds or mortgage -backed securities. This benefited both 
borrowers, who were able to post Jess desirable collateral, and lenders, who were able to 
obtain higher repo rates in exchange for accepting lower quality collateral. However, as 
the crisis escalated, lenders were reluctant to continue to accept these securities, and were 
increasingly demanding higher quality collateral and larger haircuts. At the extreme, they 
simply withdrew liquidity and stopped transacting in the markets. Borrowers that were the 
worst hit experienced collateral liquidations, capital declines, and ultimately bankruptcies. 
The case studies of Lehman Brothers and Bear Stearns provide important insights into the 
role of repo transactions in the demise of these once important institutions. 

Repos and Lehman Brothers 

JPMorgan Chase & Co. (JPM) was the tri-party repo clearing agent of Lehman Brothers 
Holdings, Inc. (Lehman). (In a tri-party repo agency arrangement, the repo trades are 
still executed between two counterparties; however, the collateral selection, payment, 
settlement, and repo management is outsourced to a third-party agent. Agents are essentially 
custodians and do not take on the risks of the transactions.) These tri-party repos were 
traded in the overnight market, and were transacted predominantly between institutional 
repo lenders and financial institution borrowers (including Lehman). Given that the trades 
were overnight transactions, they matured each morning, leaving the borrowers without 
funding during the rest of the day. To bridge this funding gap, JPM, as tri-party agent, was 
lending directly to Lehman on a secured basis during the day, typically without requiring 
haircuts on intraday advances. By August 2008, however, due to the increased risk in the 
repo markets, JPM began to phase in haircuts on intraday loans, with the loan amounts 
exceeding $100 billion in the final week of Lehmans bankruptcy. 




Professor’s Note: Lehman was one of the largest U.S. investment banks. 
The failure of Lehman in September 2008 was the largest in U.S. history 
($600 billion in assets). 



Both Lehman and JPM provide different viewpoints of the events leading up to Lehmans 
bankruptcy in September 2008. Despite the differing accounts, it is clear that the liquidity 
and value of collateral pledged in repo transactions declined during the crisis, and additional 
collateral and additional haircuts were necessary to mitigate the risks in repos. 
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According to Lehman, JPM, despite a conflict of interest due to its agent and lender role, 
breached its duty to Lehman and took advantage of its insider status (being insider to 
Lehmams internal financial condition and proposed business plans). Lehman accused JPM 
of using its influence to drain close to $14 billion in collateral from Lehman during the 
last few days before the bankruptcy, despite already being in an overcollateralized position. 
Although Lehman agreed at the time to provide additional collateral, it did so unwillingly 
and simply because there were no viable alternatives. 

According to JPM, however, JPM acted in good faith by providing continued funding to 
Lehman up until the last day, despite Lehmans deteriorating financial condition. When 
it became clear that the collateral posted to JPM by Lehman was illiquid with apparently 
overstated values, JPMs exposure to Lehman was growing at a time when Lehman’s 
creditworthiness and financial condition was deteriorating. Nevertheless, JPM continued 
to lend money despite inadequate haircuts and collateral values. The close to $14 billion in 
additional collateral requested by JPM was significantly less than what was needed to cover 
JPMs true exposure. 

Repos and Bear Stearns 

Prior to 2007, Bear Stearns Companies, Inc., (Bear Stearns) relied on funding its 
borrowings primarily in the form of short-term unsecured commercial paper. By 2007, 
however, Bear Stearns switched from unsecured borrowing to a more stable form of 
borrowing through longer term, secured repo financing, which better positioned the firm 
to withstand market liquidity events. Given the high-quality collateral posted, the firm was 
able to obtain financing at favorable rates on a term basis. 

Given the events of 2007—2009, lenders during this period became increasingly less willing 
to provide loans in the form of repo trades, and were especially averse to providing term 
(rather than overnight) repos. This led to a general shortening of repo terms, requiring 
larger haircuts, and requesting borrowers to post higher quality collateral. In early 
March 2008, Bear Stearns experienced a run on the bank that resulted from a general 
loss of confidence in the firm. This bank run led to a massive withdrawal of cash and 
unencumbered assets (i.e., assets that have not been committed or posted as collateral), and 
lenders refused to roll over their repo trades. The rapid decline in market confidence and 
withdrawal of capital ultimately led to Bear Stearns’ collapse. 




Professor’s Note: Bear Stearns was a U.S. investment bank and brokerage firm 
that was bailed out by the Federal Reserve Bank of New York and subsequently 
sold to JPM in March 2008 . 



Collateral in Repo Transactions 



LO 48.5: Compare the use of general and special collateral in repo transactions. 



Repo trades can be secured either with general collateral or with specific (i.e., special) 
collateral. 
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General Collateral 

While lenders care about the quality of collateral delivered, under general collateral (GC), 
repo lenders are not concerned with receiving a particular security or class of securities as 
collateral. Instead, only the broad categories of acceptable securities are specified. The logic 
here is that when lenders are looking to receive a specific rather than generic security as 
collateral, this creates a demand for that security and lenders have to accept a lower return 
on the repo trade. GC trades suit investors in repos because they can obtain the highest repo 
rate for the collateral received. 

The repo rate for trades secured with general collateral is called the GC rate. GC rates can 
be used for repos with U.S. Treasury collateral, and the overnight rate for U.S. Treasury 
collateral is referred to as “the” GC rate. In the United States, the GC repo rate is typically 
slightly below the federal funds rate, although repos with U.S. Treasury collateral are 
considered safer and in fact can trade below the federal funds rate. The difference between 
the federal funds rate and the GC rate is measured through the fed funds-GC spread. 

This spread widens when Treasuries become scarcer (the GC rate falls) or during times of 
financial stress, as was the case during the recent financial crisis. 




Professor’s Note: The federal funds rate is an interest rate that depository 
institutions in the United States charge each other for lending funds maintained 
at the Federal Reserve. 



Special Collateral 

When lenders are concerned with receiving a particular security as collateral, the collateral 
is referred to as special collateral, and the repo trade is called a specials trade. If you recall 
our discussion on financing as a motivation for repo lending, it should be clear that specials 
trades are particularly important in financing transactions used to obtain specific bonds. 

The repo rate for trades secured with special collateral is called the special rate. 

In specials trading, the lender of cash is concerned with receiving a particular security 
in order to finance the purchase of a bond (for shorting), or to finance its inventory or 
proprietary positions. Lenders accepting special collateral face a trade-off between receiving 
the desired security and lending at below GC rates to receive the desired security. Special 
rates differ by security because there is a rate for each security for each term. Special rates are 
determined by market supply and demand; however, it is important to note that the supply 
and demand of the underlying security is not the same as the supply and demand of the 
specials trade itself. In fact, a bond that is in high demand in the market may not be in great 
demand as collateral for a specials trade. The reverse could equally be true. 
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Special Spreads and the Auction Cycle 



LO 48.6: Describe the characteristics of special spreads and explain the typical 
behavior of US Treasury special spreads over an auction cycle. 



The difference between the GC rate and the special rate for a particular security and term is 
called a special spread. Special spreads are important because in the United States, they are 
tied closely to the U.S. government Treasury bond auctions, and the level and volatility of 
the spread can be an important gauge of market sentiment. 

In the United States, federal government bonds are sold at auction based on a 
predetermined, fixed schedule. The most recent issue is called the on-the-run (OTR) or 
current issue, while all other issues are called off-the-run (OFR). Current OTR issues tend 
to be the most liquid, with low bid-ask spreads, that can be liquidated quickly even in large 
sizes. This liquidity makes them desirable for both long positions and short positions. For 
example, a repo lender would favor these securities for short positions because the shorts 
could be covered quickly and at a relatively low cost. The popularity of OTR issues as 
special collateral in repo trades historically resulted in lower repo rates and wider special 
spreads. 

Several observations can be made by looking at the special spreads of OTR Treasury 
securities (OTR special spreads) and the auction-driven pattern of special spreads. First, 
OTR special spreads can be volatile each day depending on the special collateral. Second, 
spreads can fluctuate over time. Third, and most important, OTR special spreads are 
generally narrower (smaller) immediately after an auction but wider before auctions. They 
are narrower after auctions due to the extra supply of a new OTR security, which depresses 
special spreads. Spreads widen before auctions due to the substitutability of the special 
collateral as shorts change to the new OTR security. 

The influence of auctions can also be observed from the term structure of individual OTR 
issues based on term special spreads (the difference between term GC rates and term special 
rates). Term special spreads are expected to decline immediately following the issue of the 
new OTR security but increase closer to the dates of the new auctions. 



Special Spreads and Rate Levels 

Special spreads generally move within a band that is capped at the GC rate (implying a floor 
of 0% for the special rate). When a trader short sells the OTR Treasury security but fails to 
deliver on settlement, the trader would not receive cash from the sale and would also miss 
out on a days interest on the cash. To satisfy the settlement obligation to deliver the bond, 
the trader could borrow the bond in the overnight repo market and pay a special rate of 0% 
(essentially the trader provides free financing in exchange for receiving the desired bond). At 
any rate below 0%, no trader would borrower the bond. This puts both an effective lower 
bound and an effective cap of the special spread at the GC rate. 

The special spread can also be tied to the penalty for failed trades. Until 2009, there was 
no penalty for failed trades. However, in light of the financial crisis and trillions of dollars 
in failed OTR deliveries, regulators adopted a penalty rate for failed trades, equal to the 
greater of 3% minus the federal funds rate, or zero. This means that as the federal funds rate 
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increases, the penalty falls, and when the federal funds rate declines to zero, the penalty rate 
reaches its maximum at 3%. As a result, the new upper limit for the special spread is the 
penalty rate. 



LO 48.7: Calculate the financing value of a bond trading special when used in a 
repo transaction. 



The premium trading value of OTR bonds is due both to their liquidity and financing 
advantage as we previously discussed. The liquidity advantage stems from the ability to sell 
these bonds quickly for cash. The financing value stems from the ability to lend the bonds 
at a cheap special rate and use the cash to lend out at higher GC rates. This financing value 
is dependent on the trader s expectation of how long the bond will continue trading at its 
special rate before the rate moves higher toward the GC rate. 



Let’s assume that an OTR bond is issued on January 1 and trades at a special spread of 
0.18%. A trader expects the bond to trade at GC rates past March 31. The financing value 
of the OTR bond is therefore the value over 90 days. The value of $100 of cash at the 
spread of 0. 18% is: 

90 x 0 . 18 % 

$ 1 00 X = $0,045 

360 



Thus, the financing value is 4.5 cents per $100 market value of the bond. 
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Key Concepts 



LO 48.1 

Repurchase agreements, or repos, are bilateral contracts where one party sells a security at 
a specified price with a commitment to buy back the security at a future date at a higher 
price. From the perspective of the borrower we refer to repos, while from the perspective of 
the lender we refer to reverse repos. Repos are valued based on a simple time value of money 
calculation. 



LO 48.2 

From the perspective of the borrower, repos offer relatively cheap sources of obtaining short- 
term funds. Balancing the cost of funding (e.g., through repos) and other sources of funds 
(including potentially no funding) is called liquidity management. 

From the perspective of the lender, repos can be used for either investing (cash 
management) or for financing purposes (e.g., to finance short bond positions). 



LO 48.3 

Repos give rise to both counterparty risk and liquidity risk. Counterparty (credit) risk is the 
risk of borrower default or non-payment of its obligations. Liquidity risk is the risk of an 
adverse change in the value of the collateral. Counterparty risk is mitigated with collateral, 
while liquidity risk is mitigated with haircuts, margin calls, shorter repo terms, and higher 
quality collateral. 



LO 48.4 

During the recent financial crisis, lenders were increasingly demanding higher quality 
collateral and larger haircuts and even withdrew liquidity altogether. Borrowers experienced 
collateral liquidations and capital declines, leading to several high profile company failures 
and bankruptcies. The failures of Bear Stearns and Lehman Brothers illustrate these events. 



LO 48.5 

Repo trades can be secured either with general collateral or with specific collateral. Lenders 
(as investors) in general collateral (GC) repo trades are not concerned with receiving a 
specific security, and only the broad categories of acceptable securities are specified. GC 
trades suit investors in repos because they can obtain the highest repo rate for the collateral 
received. Lenders (as financing participants) in special collateral repo trades (specials trades) 
are concerned with receiving a particular security as collateral. The particular security 
received can then be used to finance the purchase of a bond (for shorting) or to finance its 
inventory or proprietary positions. 
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The difference between the GC rate and the special rate for a particular security and term 
is called a special spread. Special spreads are tied closely to Treasury bond auctions, and the 
level and volatility of the spread can be an important gauge of market sentiment. Special 
spreads are generally narrower immediately after an auction, but widen before auctions. 
Spreads generally move within a band that is capped at the GC rate (implying a floor of 0% 
for the special rate). 

Following the recent financial crisis, regulators adopted a penalty rate for failed trades at the 
greater of 3% minus the federal funds rate, or zero. As a result, the penalty rate becomes the 
new upper limit for the special spread. 



LO 48.7 

The financing value of the bond is the ability to lend the bonds at a relatively cheap special 
rate and use the cash to lend out at higher GC rates. This financing value is dependent on 
the trader s expectation of how long the bond will continue trading at its special rate. 



©2015 Kaplan, Inc. 



Page 149 



Topic 48 

Cross Reference to GARP Assigned Reading — Tuckman an d Serrat, Chapter 12 



Concept Checkers 



1. Pasquini Investments (Pasquini) is a private brokerage looking for 30-day financing 
of $25 million of its accounts payable but is unsure whether the appropriate 
investment is a term repurchase agreement (repo) or a term reverse repo agreement. 
Pasquini is willing to post AAA- rated government bonds as collateral. The bonds 
have a face value of $27 million and a market value of $25 million. The firm is 
quoted a rate of 0.5% for the transaction. Which of the following choices most 
accurately reflects the contract type and the contract price needed by Pasquini? 





Contract tvpe 


Contract price 


A. 


Repo 


$27,011,250 


B. 


Reverse repo 


$25,010,417 


C. 


Repo 


$25,010,417 


D. 


Reverse repo 


$27,011,250 



2. Posting collateral and requiring collateral haircuts are important risk mitigants in 
repo transactions with respect to which of the following risks? 





Posting collateral 


Collateral haircuts 


A. 


Market risk 


Interest rate risk 


B. 


Credit risk 


Interest rate risk 


C. 


Market risk 


Liquidity risk 


D. 


Credit risk 


Liquidity risk 



3. Kotra Bank Holdings, Inc., (Kotra) is currently weighing the cost of its funding 
against the risk of being left without financing. The term that best describes Kotra’s 
activities is: 

A. counterparty (credit) risk. 

B. specials trading. 

C. liquidity management. 

D. overnight funding. 

4. In a presentation to management, a bond trader makes the following statements 
about repo collateral: 

Statement 1: “The difference between the federal funds rate and the general collateral 
rate is the special spread. ” 

Statement 2: “ During times of financial crises, the spread between the federal funds rate 
and the general collateral rate widens. ” 

Which of the trader s statements are accurate? 

A. Both statements are incorrect. 

B. Only Statement 1 is correct. 

C. Only Statement 2 is correct. 

D. Both statements are correct. 
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The latest on-the-run (OTR) Treasury bond issued on March 1 is trading at a special 
spread of 0.25%. Traders expect the bond to trade at general collateral (GC) rates 
past June 30. The financing value of the OTR bond is therefore the value over 122 
days. Given this information, the value of lending $100 of cash is closest to: 

A. $0,085. 

B. $0,250. 

C. $0,305. 

D. $0,847. 
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Concept Checker Answers 



i. c 



Given that Pasquini is a borrower in the repo market, the transaction is a repo from the 
perspective of the firm (but a reverse repo from the perspective of the lender). The contract 
price is calculated as follows: 



$25, 000,000 x 14 



0.5% X 30' 

360 j 



$25,010,417 



2. D Collateral is an important counterparty credit risk mitigant. Repo loans are secured by 

collateral, which makes the lender much less vulnerable to a decline in the creditworthiness 
of the borrower. Collateral haircuts are important in mitigating liquidity risk in repo 
transactions. The lender is exposed to the risk of the value of the collateral declining during 
the repo term, which can be mitigated by requiring (higher) haircut values, that is, discounts 
to the value of the posted collateral. 

3. C The process of weighing the cost of its funding against the risk of being left without 

financing is called liquidity management. Counterparty (credit) risk is the risk of borrower 
default or non-payment of its obligations. In specials trading, a lender of cash initiates a repo 
trade in order to receive a particular security (special collateral). Overnight funding refers to 
borrowing and lending in the overnight market. 

4. C The trader s first statement is incorrect. The difference between the federal funds rate and 

the general collateral (GC) rate is known as the fed funds-GC spread. The special spread is the 
difference between the GC rate and the special rate for a particular security. 

The trader’s second comment is correct. During rimes of financial crises, the spread between 
the federal funds rate and the general collateral rate widens as the willingness to lend Treasury 
securities declines, lowering the GC rate (thereby increasing the spread). 

5. A The financing value of $100 of cash at a spread of 0.25% is calculated as: 

$100 x 122x0 - 25 % _ $0.0847 or 8.47 cents 
360 
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Observations on Developments in 
Risk Appetite Frameworks and 
IT Infrastructure 



Topic 49 

Exam Focus 

This topic discusses the concept of a risk appetite framework (RAF). For the exam, 
understand the elements and benefits of an RAF, and be familiar with best practices for an 
effective RAF. Also, be able to identify metrics that can be monitored as part of an effective 
RAF. Finally, understand the elements and benefits of a robust risk data infrastructure as well 
as best practices relating to data aggregation. 



Risk Appetite Framework 



LO 49.1: Describe the concept of a risk appetite framework (RAF), identify the 
elements of a RAF and explain the benefits to a firm of having a well developed RAF. 



A risk appetite framework (RAF) is a strategic decision-making tool that represents the 
firm’s core risk strategy. It sets in place a clear, future-oriented perspective of the firm’s target 
risk profile in a number of different scenarios and maps out a strategy for achieving that 
risk profile. It also specifies which types of risk the firm is willing to take and under what 
conditions as well as which types of risk the firm is unwilling to take. 

An RAF should start with a risk appetite statement that is essentially a mission statement 
from a risk perspective. This statement should cover some or all of the following elements: 

• Desired business mix and balance sheet composition (i.e., capital structure — trade-off 
between debt and equity). 

• Risk preferences (i.e., how much credit or market risk to take on or hedge) 

• Accep table trade-off between risk and reward. 

• Acceptable limits for volatility (based on standard deviation). 

• Capital thresholds (i.e., regulatory and economic capital). 

• Tolerances for post-stress losses. 

• Target credit ratings. 

• Optimum liquidity ratios. 

The benefits of a well-developed RAF are as follows: 

• It improves a firm’s strategic planning and tactical decision-making. 

• The inherent flexibility allows firms to adapt to market changes, especially if appropriate 
opportunities arise that require adjustments to the RAF. 
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• It assists firms in preparing for the unexpected; requires business line strategy reviews 
and maintains an open dialogue regarding the management of unexpected economic or 
market events in particular geographies or products. 

• It focuses on the future and sets expectations regarding the firms consolidated risk profile 
after performing relevant stress tests and scenario analyses. Thus, it helps the firm set up 
a plan for risk taking, loss mitigation, and use of contingency measures. 

Developing and Implementing an Effective RAF 



LO 49.2: Describe best practices for a firms Chief Risk Officer (CRO), Chief 
Executive Officer (CEO) and Board of Directors in the development and 
implementation of an effective RAF. 



Chief Risk Officer (CRO) Best Practices 

Board members involved with risk issues should be able to directly contact the CRO and 
engage in frequent communication about on-going key risk issues. A best practice could 
be to create a board risk committee that is directly involved in performance review and 
compensation decisions regarding the CRO. A strong alliance between the CRO (risk 
management function) and the CFO (budgetary considerations) is key to spreading the use 
of the RAF throughout the organization. Specifically, a best practice would be for the CRO 
and CFO to report to the board at every meeting by commenting on the firms risk profile 
in comparison to the RAF. The CRO discussion could be broad and strategic in nature, and 
the CFO discussion could discuss financial impacts. 

Chief Executive Officer (CEO) Best Practices 

The CEO should strongly support the RAF and refer/ use it to support challenging risk and 
strategic decisions. The willingness of the CEO to give the CRO the final word on many 
risk decisions is a best practice since it strengthens the importance of the risk management 
function. Where any instances of non-compliance with the RAF exist, a best practice would 
be for the CRO and/ or the CEO to advise the board of directors on the corrective measures 
that will be undertaken. 

Board of Directors (Board) Best Practices 

The board needs to spend a considerable amount of time conveying the firms risk appetite 
statement throughout the firm to ensure it is properly implemented. In challenging 
management to operate the firm in a way that is congruent with the RAF, the board must 
focus on strategic and forward-looking issues rather than dwelling on past actions. A best 
practice would be for the board to state its expectations to management in advance so that 
management can establish appropriate strategic plans. 

When a board challenges management and requires a thorough vetting of the RAF, the end 
product is more complete and relevant. A best practice is to have the active involvement 
of the board with senior management in continually revising the RAF until everyone 
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is satisfied. Additionally, another best practice is the development of a concrete way of 
assessing when the RAF needs to be amended to reflect a changing environment. 

With regard to technical knowledge of members, there should be a sufficient balance in 
board composition to ensure all members have a reasonable and congruent understanding 
of the firm’s risks and to avoid situations where there are marked divisions between “experts” 
and “non-experts.” A best practice is to provide detailed technical training to board 
members on relevant concepts. Additionally, requiring cross-membership amongst the 
major committees helps ensure that those functions have members with a strong technical 
base. The training and cross-membership practices should serve as supplements to existing 
expertise. 

Boards must be proactive in stating the nature and frequency of the information they need. 

As a best practice, reporting to the board should be thorough and broad in scope and not 
overly simplified. Additionally, communication from management should include a business 
aspect and not be focused on just technical aspects. Finally, as another best practice, the 
board should be willing to push back to management if they feel the information provided 
is not sufficient for their needs. 

Reputation risk needs to have a significant amount of the board’s attention. As a best 
practice, the board should set up a reputational risk committee to analyze marketplace 
changes and approve transactions on the basis of geography or product line. Attempting 
qualitative measures of reputation risk should also be done via monitoring industry 
headlines and reporting trends to the board as well as hiring external parties to conduct 
relevant surveys. 



Using RAF to Manage Business Lines 



LO 49.3: Explain the role of a RAF in managing the risk of individual business 
lines within a firm. 



Generally speaking, the RAF helps to ensure that each business line’s strategies are 
congruent with the firm’s desired risk profile. The various business line managers each 
submit a medium-term business plan to senior management and/or the board to determine 
if it is consistent with the RAF. Such determinations are often made with stress tests or 
scenario analyses. Afterward, the RAF will set the risk limits allocated to each business line 
based on its desired risk profile. 

Additionally, the RAF considers the integrated nature of the business lines within the firm. 
For example, the RAF can help determine how much a given business line’s medium-term 
business plans has to be amended in order to allow another business line’s proposal to be 
approved. In other words, there may be some borrowing of the risk appetite allotment from 
a business line in order to take advantage of the current opportunity in another business 
line. Familiarity with the RAF by business line managers would dramatically decrease the 
number of plans that fall well outside acceptable bounds. A clear RAF assists the firm in 
preventing risk appetite drift when economic conditions change. 
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Effective RAF Metrics 



LO 49.4: Describe the classes of risk metrics to be communicated to managers 
within the firm. 



Examples of metrics that can be monitored as part of an effective RAF are as follows: 

• Capital targets (economic capital, tangible common equity, total leverage) or capital-at- 
risk amounts. 

• Liquidity ratios, terms, and survival horizons. 

• Net interest income volatility or earnings-at-risk calculations. 

• Value at risk (VaR) limits. 

• Risk sensitivity limits. 

« Risk concentrations by internal and/or external credit ratings. 

• Expected loss ratios. 

« The firms own credit spreads. 

• Asset growth ceilings by business line or exposure type. 

• Performance of internal audit ratings. 

• Economic value added. 

• Post-stress- test targets for capital, liquidity, and earnings. 

It is important to ensure that the metrics used to monitor risk are appropriate to the users 
of the information. Therefore, the risk metrics should be divided into classes, depending on 
who is receiving the information within the firm. For example: 

• Directors should receive high-level metrics (less detail) that reflect the firms key risks. 

• CEO, CFO, CRO should receive more detailed metrics than d i rectors. 

• Business line leaders should receive very detailed metrics, especially in relation to their 
respective business lines. 

Risk Data Infrastructure 



LO 49.5: Explain the benefits to a firm from having a robust risk data 
infrastructure, and describe key elements of an effective IT risk management policy 
at a firm. 



A benefit of a robust risk data infrastructure is the ability to aggregate timely and accurate 
data to report on credit, market, liquidity, and operational risks. This, in turn, allows 
management to make proper decisions regarding the firms strategy, risk appetite, and 
risk management during periods of constant and frequent changes. Another benefit is the 
ability to sufficiently document and convey the firms risk reporting requirements. Such 
requirements include: specific metrics, data accuracy expectations, element definitions, time 
frames, supervisory expectations, and regulatory reporting requirements. 

Key elements of an effective IT risk management policy at a firm are described as follows: 

• Clearly defined standards and internal risk reporting requirements to ensure a proper IT 
infrastructure and internal reporting. 

• Sufficient funding is provided to develop IT systems for the purpose of internal risk 
reporting; they compete equally with proposals that are revenue generating, for example. 



Page 156 



©2015 Kaplan, Inc. 



Topic 49 

Ctoss Reference to GARP Assigned Reading — Senior Supervisors Group 

• Assessing IT infrastructure and capacity prior to approving new products. 

• Post-implementation reviews of IT systems performed anywhere from 6—18 months 
afterward as a check that the systems meet the risk personnels needs. 

• The level of governance for outsourced IT activities is the same as if they were done 
in-house. There are no impediments to implementation or access to data due to 
outsourcing. 

• The existence of effective project management offices (PMOs) to ensure that timelines 
and deliverables are met. Specifically, one person is in charge of the PMO, which seems 
to result in stronger coordination and communication between project staff. 

• There is a data administrator as well as a data owner, and the data owner must ensure 
a sufficiently high level of data accuracy, integrity, and availability. This helps to ensure 
that IT projects are meeting the users needs. 

• The board is able to implement relevant internal audit programs to allow for periodic 
reviews of data maintenance processes and functions. The monitoring could be 
continuous or specific to a product or business line. This would allow for the quick 
correction of any weaknesses detected by internal audit. 

Poor or Fragmented IT Infrastructure 



LO 49.6: Describe factors which could lead to poor or fragmented IT 
infrastructure at an organization. 



There are five major factors to consider with regard to poor or fragmented IT 

infrastructures. 

1 . No common understanding of long-term business strategy between business lines and IT 
management. This factor often results due to internal competition for funding, thereby 
not permitting important IT infrastructure projects to be completed. 

2. Management only makes decisions based on short-term profits. As a result of this factor, 
many IT infrastructure projects are scaled back, delayed, or eliminated. 

3. Significant turnover in important IT roles within the firm. This factor has resulted in 
delays in completing IT projects. 

4. Insufficient data governance and insufficient data management plan within the firm. This 
factor results in inconsistency across business lines in how to upgrade systems; this is 
costly if the systems end up being incompatible because of the inconsistencies. 

5. Merger and acquisition activities. This factor results in multiple systems running 
simultaneously within the recently merged firm. Data aggregation across products and 
business lines becomes a significant challenge. 
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Data Aggregation Best Practices 



LO 49 .7: Explain the challenges and best practices related to data aggregation at an 
organization. 



The existence of several IT systems being operated simultaneously within a firm results in 

a lack of integrated IT systems. This, in turn, requires a significant amount of manual data 

entry to allow for proper aggregation of risk data. Best practices related to data aggregation 

at an organization are explained as follows: 

• To increase efficiency and accuracy, minimize the amount of manual intervention and 
manual data manipulation (i.e., spreadsheets) by automating the risk data aggregation 
process. 

• Aggregated risk data needs to be accurate, timely, and comprehensive in order to have 
value. Therefore, there must be standards, cutoff times, and ti m elines regarding the 
production of internal risk reports. 

• Single platform centralized databases with single identifiers and/or consistent naming 
conventions could allow for the timely retrieval of multiple records of risk data across the 
firm. They also permit data segmentation when required to produce specific data 

(i.e., risk concentrations). 

• Create data warehouses that will take information from various subsystems and store 
them in a warehouse. The data is then filtered and reorganized so that customized reports 
can be created using specific data from the warehouse. 

• Automated reconciliation will reduce the risk of manual errors and incomplete 
information. For example, off-balance sheet data should not be omitted. 

• Periodic reconciliation of risk and financial data will ensure the accuracy and proper 
operation of the IT system. 

• For merger and acquisition transactions, ensuring that legacy IT systems are integrated 
into the chosen IT system as soon as possible. 

• When obtaining approvals for new IT purchases, involve the appropriate technical staff 
to ensure that the existing systems can process and aggregate data from these new items. 
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Key Concepts 



LO 49.1 

A risk appetite framework (RAF) sets in place a clear, future-oriented perspective of the 
firm’s target risk profile in a number of different scenarios and maps out a strategy for 
achieving that risk profile. An RAF should start with a risk appetite statement that is 
essentially a mission statement from a risk perspective. Benefits of a well-developed RAF 
include assisting firms in preparing for the unexpected and greatly improving a firms 
strategic planning and tactical decision-making. 



LO 49-2 

The chief risk officer (CRO) should be easily available to the board of directors (board) and 
there should be a strong alliance between the CRO and the chief financial officer (CFO). 

The chief executive officer (CEO) should strongly support the RAF and give the CRO the 
final word on risk decisions. 

The board should: be willing to challenge management to operate the firm consistent 
with the RAF, actively work with senior management to continually revise the RAF, have 
sufficient technical and business understanding of the risks facing the firm, be proactive in 
stating the nature and frequency of the information they need, and set up a reputational 
risk committee. 



LO 49.3 

The RAF helps to ensure that each business line s strategies are congruent with the firms 
desired risk profile. It also considers the integrated nature of the business lines within the 
firm. 



LO 49.4 

Many metrics can be monitored as part of an effective RAF. Risk metrics should be divided 
into classes, depending on who is receiving the information within the firm. 



LO 49.5 

A robust data infrastructure results in management being able to make proper decisions 
regarding a firm’s strategy, risk appetite, and risk management. Additionally, it allows for the 
ability to sufficiently document and convey the firms risk reporting requirements. 

Key elements of an effective IT risk management policy include: clearly defined standards 
and internal risk reporting requirements, sufficient funding to develop IT systems, 
assessing IT infrastructure and capacity prior to approving new products, timely post- 
implementation reviews of IT systems, and sufficient governance for outsourced IT 
activities. 
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LO 49.6 

Poor or fragmented IT infrastructures result from a lack of common understanding of long- 
term business strategies between business lines and IT management, managers thinking 
only about short-term profits, significant turnover in IT roles, insufficient data governance, 
and merger and acquisition activities. 



LO 49.7 

The lack of integrated IT systems is the major challenge related to data aggregations. 

Many best practices regarding data aggregations exist including: minimizing the amount of 
manual data processes, using single platform centralized databases, creating data warehouses, 
automated and periodic data reconciliations, and timely integration of legacy IT systems. 
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Concept Checkers 



1 . Which of the following statements regarding the risk appetite framework (RAF) is 
correct? 

A. The RAF represents the firms core risk strategy. 

B. The RAF should be amended to take advantage of all profitable opportunities. 

C. The RAF focuses on which risks the firm is willing to take and under what 
conditions. 

D. The RAF begins with the risk appetite statement that contains many elements, 
including examining the composition of the income statement. 

2. As a best practice, which of the following members of senior management should 
have the final word on significant risk decisions at a firm? 

A. Chief executive officer. 

B. Chief financial officer. 

C. Chief operating officer. 

D. Chief risk officer. 

3. Which of the following statements regarding the role of a risk appetite framework 
(RAF) in managing the risk of individual business lines within a firm is correct? 

A. Individual business lines may collectively cause the firms RAF to drift when 
market conditions change. 

B. Sensitivity analysis is a robust tool to assist senior management and/or the board 
to determine consistency with the RAF. 

C. Each individual business line’s risk appetite allotment according to the RAF is 
independent of the others to ensure objectivity in the process. 

D. The business line managers submit long-term business plans to senior 
management and/or the board to determine if they are consistent with the RAF. 

4. Which of the following statements is incorrect regarding the key elements of an 
effective IT risk management policy? 

A. Having a single person in charge of the project management office. 

B. Comparable funding for IT projects and revenue-generating projects. 

C. Post-implementation reviews of IT systems at least 24 months after 
implementation. 

D. Outsourced and in-house IT activities being subjected to the same level of 
monitoring. 

5. Which of the following items is a best practice related to data aggregation at an 
organization? 

A. Integrating legacy IT systems into the new IT system immediately. 

B. The use of one master spreadsheet to accumulate all of the data in one place. 

C. Periodic manual reconciliations to reduce the risk of errors and incomplete 
information. 

D. Allowing individual departments as much time as they require to produce 
internal reports that are accurate, timely, and comprehensive. 



©2015 Kaplan, Inc. 



Page 161 





Topic 49 

Cross Reference to GARP Assigned Reading — Senior Supervisors Group 



Concept Checker Answers 



1 . A The RAF represents the firms core risk strategy. The RAF does not necessarily need to be 

amended every rime there is a profitable opportunity; doing so would cause the RAF to lose 
its value. The RAF also focuses on which risks the firm is unwilling to take. The risk appetite 
statement would not likely include an examination of the composition of the income 
statement; it would more likely be the balance sheet (i.e., debt, equity). 

2. D The willingness of the CEO to give the CRO the final word on many risk decisions is a best 

practice, which has strengthened the importance of the risk management function. 

3. A Individual business lines may collectively cause the firms RAF to drift when market 

conditions change. Sensitivity analysis only examines one change in a variable at a rime. 
More robust tools would be stress tests and scenario analyses, for example. Each business 
line s risk appetite allotment according to the RAF may be amended if another business line 
encounters an opportunity that requires more capital. The business line managers submit 
medium-term business plans to senior management and/or the board. 

4. C Post-implementation reviews should be performed 6-18 months after implementation; 

24 months or more would likely be too long. Having one person in charge of the project 
management office seems to have resulted in stronger coordination and communication 
between project staff. 

5. A For merger and acquisition transactions, it is best that legacy IT systems are integrated 

into the chosen IT system as soon as possible. Spreadsheets are a form of manual data 
manipulation and, because they are not automated, they would not be a best practice. 
Automated reconciliations should be performed, not manual. One of the key points about 
internal risk reports is that they should be produced on a timely basis, therefore, there must 
be standards, cutoff times, and timelines regarding their production. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Capital Allocation and 
Performance Measurement 



Topic 50 



Exam Focus 

This topic covers the application of the risk-adjusted return on capital (RAROC) approach 
to the allocation of economic capital. The practical issues associated with the necessary 
measurement of market, credit, and operational risks are discussed. The application of 
the RAROC approach to nonloan products is described, and a modified version of the 
traditional RAROC approach is presented. For the exam, understand the relationship 
between economic capital and RAROC and know how to compute RAROC and adjusted 
RAROC. 



Risk-Adjusted Return on Capital 



LO 50 . 1 : Describe the RAROC (risk-adjusted return on capital) methodology and 
its benefits. 



The risk-adjusted return on capital (RAROC) measure is essential to successful integrated 
risk management. Its main function is to relate the return on capital to the riskiness of firm 
investments. The measure promotes a consistent and unbiased way to measure performance 
and provides necessary information to support efficient risk-and-return decisions. In the 
LOs to follow, we will discuss the use of economic capital and how this capital level is 
incorporated into the risk-adjusted measure. Also discussed is an adjusted RAROC measure 
that provides a more appropriate way to align firm risks. 

Economic Capital and RAROC 



LO 50 . 2 : Define, compare and contrast economic and regulatory capital. 



Economic capital provides protection against risk (i.e., unexpected losses). It furnishes an 
institutions various stakeholders with a degree of confidence that their invested funds are safe. 

It is important to distinguish between economic capital and reserves. Firms set aside reserves 
in preparation for expected losses. Economic capital is designed to provide a cushion against 
unexpected losses at a specified confidence level. 

The confidence level at which economic capital is set can be viewed as the probability that 
the firm will be able to absorb unexpected losses over a specified period. For example, if a 
bank sets economic capital at the 95% confidence level, there is a 95% chance that actual 
losses will be less than economic capital. There is a 5% chance that actual losses will exceed 
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economic capital. Note that it is cost prohibitive for a financial institution to operate at the 
100% confidence level. 

The amount of regulatory capital that a bank is required to hold is determined by 
regulatory guidelines, which are designed to assure there is sufficient capital in the banking 
system. The economic capital held by most financial institutions exceeds the required 
amount of regulatory capital. 




Professor’s Note: We will examine the regulatory capital charges for credit , market, 
and operational risk in the Basel readings. 



Economic capital is important from the perspective of the firms stakeholders. The amount 
of economic capital that a firm holds and the allocation of economic capital among its 
business lines have a profound effect on business and overall firm performance. 



LO 50.3: Compute and interpret the RAROC for a loan or loan portfolio, and use 
RAROC to compare business unit performance. 



The necessary amou n t of economic capital is a fu n ction of credit risk, market risk, and 
operating risk. The RAROC for a loan can be defined as risk-adjusted return divided by 
risk-adjusted capital. As you will see later, economic capital can be used as a proxy for risk- 
adjusted capital. 

The relationship between economic capital and RAROC can be examined by considering a 
$100 million loan with the following initial assumptions: 

• Expected loss (EL) - lOObp. 

• Economic capital required = $8 million. 

Unexpected loss at a high confidence level for this loan = [worst-case loss (i.e., VaR) — 
expected loss] x loan amount. 

The RAROC for this loan is the risk-adjusted return divided by risk-adjusted capital, or: 



RAROC = 



revenues - expected loss — expenses + return on economic capital ± transfer price 

economic capital 



The numerator in the RAROC equation includes the gross revenues from the loan less the 
expected loss and other loan expenses. Economic capital is often invested in high-quality 
liquid securities, so the return on invested economic capital must be added to expected loan 
revenues. Also, an adjustment is made for relevant operating revenues or expenses associated 
with the loan. 




Professor ’s Note: On previous exams, the risk-adjusted return on capital has been 
measured simply as: profit I risk capital. Be prepared to use VaR as a proxy for risk 
capital if a measure of economic capital is not provided. 
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Example: Compute RAROC 

Given the following assumptions on a $100 million loan, calculate the RAROC. 

• Gross revenue of $7 million. 

• Interest expense of $5 million. 

• Return on invested economic capital of $350,000. 

• Operating cost (to the business unit making the loan) of $250,000. 

• Expected loss (EL) = lOObp. 

• Economic capital required = $8 million. 

Answer: 



First, calculate the expected loss. EL = 0.01 x $100,000,000 = $1,000,000. Then, apply 
the RAROC equation: 



RAROC = 



$7 - $1 - $5 + $0.35 ~ $0.25 

$8 



13.75% 



The 13.75% RAROC computed here can be viewed as the required return on the equity 
used to support the loan. 



Capital Attributed to Market, Credit, and Operational Risk 



LO 50.4: Explain how capital is attributed to market, credit, and operational risk. 

LO 50.5: Calculate the capital charge for market risk and credit risk. 

LO 50.6: Explain the difficulties encountered in attributing economic capital to 
operational risk. 



Market risk is the risk of loss as a result of changes in market risk factors. Credit risk is the 
risk of loss associated with changes in the factors that affect the credit quality of an asset, 
and operational risk is the risk of loss due to factors that lead to operational failure, such as 
human error, technology change, computer crashes, and regulatory changes. Many banks, 
at the very least, measure and manage risk in these three categories. Measurement of risk- 
adjusted returns for banks is a formidable challenge. 

The major source of market risk for a bank that arises from interest rate risk is called gap 
risk, the risk inherent in the mismatch between a bank’s interest-rate-sensitive assets and its 
interest-rate-sensitive liabilities. Gap risk and other types of market risk must be considered 
when constructing the loss distribution used in RAROC computations. 
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Capital Attributed to Market Risk 

RAROC capital allocation for market risk involves attributing RAROC capital in terms of 
the amount of risk in the computation of value at risk (VaR). RAROC market risk charges 
are often made on the basis of unused market risk limits and excesses over these limits. For 
example, given a VaR estimate at a specified confidence level, the market risk capital charge 
can be expressed as: 



market risk capital charge = F^VaR) + F 2 [max(VaR limit — VaR, 0)] + 

F 3 [max (VaR — VaR limit, 0)] 



where: 

F 1 - a constant that adjusts for the day-to-day event risk not captured in the VaR model 
F 2 = multiplier used to determine the charge for the unused portion of the VaR limit 
F 3 = multiplier used to determine the charge for exceeding the VaR limit 

The way the formula is constructed, either F 2 [max(VaR limit — VaR, 0)] or F^ [max (VaR 
— VaR limit, 0)] is equal to zero. If the VaR limit has not been exceeded, there is a charge 
for the unused portion of the limit, and the third term is zero. If the VaR limit has been 
exceeded, there is a charge for exceeding the limit, and the second term is zero. 



Example: Capital charge for market risk 

Suppose the VaR limit at the 99% confidence level is $100,000, F^ = 2.00, F 2 - 0.20, and 
F 3 - 4.00. Compute the market risk capital charge if the VaR is: 

• $80,000 (the VaR limit has not been exceeded). 

• $150,000 (the VaR li m it has been exceeded). 

Answer: 

If VaR is $80,000, then: 

capital charge for market risk 

= 2.00 ($80,000) + 0.20($ 100,000 - $80,000) + 4.00($0) = $164,000 
If VaR is $150,000, then: 

capital charge for market risk 

= 2.00 ($150,000) + 0.20($0) + 4.00($ 150,000 - $100,000) = 500,000 




Professor’s Note: This method of attributing capital is similar to the Internal 
Models Approach (IMA) discussed in the Basel readings. Note that IMA is used for 
allocating regulatory capital to market risks. 
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Capital Attributed to Credit Risk 

The process used to attribute capital to credit risk employs standardized capital factors, 
which express the amount of credit risk as a function of rating and maturity. At a given 
rating, the capital factor increases as maturity increases. Similarly, at a given maturity, the 
capital factor increases as credit quality decreases. The credit capital charge for credit risk is 
determined as: 

credit risk capital charge - capital factor x market value of position 

Capital factors may be obtained from the rating agencies, or by using proprietary external 
models such as KMV® and publicly available models such as CreditMetrics®. 

Capital Attributed to Operational Risk 

Relative to market risk and credit risk, operational risk is the most difficult to measure. 
While many sophisticated banks have developed sound methodologies for quantifying 
market and credit risks, operational risk measurement remains more an art than a science. 
This is a major concern because operational risks often represent an enormous potential loss 
to a financial institution. 

Success in applying VaR concepts to operational risk measurement has been limited because 
internal data points are usually too few to build the necessary loss distribution. Another 
simpler procedure for allocating operational risk capital is to assign operational risk ratings 
to business lines or transactions based on the factors that lead to operational losses (i.e., 
people, processes, and technology). Firm -wide operational risk capital can then be allocated 
to the individual businesses or products based on a ranking of their operational risk ratings. 



Capital for Nonloan Products 



LO 50.7: Describe the Loan Equivalent Approach and use it to calculate RAROC 
capital. 



In addition to standard loans, many banks offer other products to which capital must 
be allocated. In doing so, it is useful to think of the risks of these products in terms of 
their loan equivalencies. The general approach for allocating RAROC capital for nonloan 
products is to multiply their loan equivalent value by the standardized capital factors 
discussed in the previous section. 
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First- and Second-Generation RAROC 



LO 50.8: Explain how the second-generation RAROC approaches improve 
economic capital allocation decisions. 

LO 50.9: Compute the adjusted RAROC for a project to determine its viability. 



Many banks use the RAROC approach to allocate economic capital by calculating the 
RAROC for a business unit or product and comparing it to a preset RAROC hurdle rate. 
The argument for using this methodology is that only projects that provide a RAROC 
above the hurdle rate make a positive contribution to shareholder wealth. Unfortunately, 
this approach can actually lead to decisions that decrease shareholder wealth. 

Under the traditional (first-generation) RAROC approach, the RAROC for a business 
is compared to the firm s cost of equity. If the RAROC exceeds the cost of equity, it is 
concluded that the business adds value to the firm. The flaw in the first-generation RAROC 
approach is its assumption that the default probability of risky investments rema i ns 
constant. This assumption is inconsistent with a constant expected return on the firm’s 
equity because in order for the probability of default to remai n constant, the firm’s return 
on equity must change. Likewise, if the return on the firm’s equity is to remain constant, the 
probability of default must change. 




Professor's Note: Stated differently, the first generation RAROC picks a constant 
return on equity to evaluate whether projects add value. As indicated, this approach 
assumes a constant probability of default. However, as the risk of the business 
changes, the probability of default will change, so a constant return on equity does 
not ensure a constant probability of default. 



A second-generation RAROC methodology has been developed to overcome the inherent 
problem with the first-generation approach. The main goal of the second-generation 
methodology is to align the risk of the business with the risk of the firm’s equity. Under the 
second-generation approach, an adjusted RAROC (ARAROC) is computed as follows: 



ARAROC = 



(RAROC -R F ) 
Pe 



where: 

(3 e = systematic risk of the firm’s equity 
Rp = risk-free rate of return 



An investment will increase shareholder value if ARAROC exceeds the difference between 
the market return, R^, and the risk-free rate, which is often referred to as the market risk 
premium. Thus, the decision rule is to accept the project if ARAROC > R M — R p . 
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Example: Adjusted RAROC 

Suppose RAROC is 12%, the risk-free rate is 5%, the market return is 1 1%, and the firms 
equity beta is 1.5. Use ARAROC to determine whether the project should be accepted. 

Answer: 



ARAROC = 



(0.12-0.05) 

1.5 



0.047 = 4.7% 



The project should be rejected because the ARAROC of 4.7% is less than the excess 
return on the market: 1 1% - 5% = 6%. 
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Key Concepts 



LO 50.1 

The risk-adjusted return on capital (RAROC) measure is essential to successful integrated 
risk management. Its main function is to relate the return on capital to the riskiness of firm 
investments. 



LO 50.2 

Economic capital provides a cushion against unexpected losses at a specified confidence 
level. Regulatory capital is determined by regulatory guidelines to protect the banking 
system. 

The amount and allocation of economic capital significantly affects firm performance. 



LO 50.3 

Risk-adjusted return on capital (RAROC) = 

revenues — expected loss — expenses + return on economic capital ± transfer price 

economic capital 



LO 50.4 

RAROC charges for market risk are often made on the basis of unused market risk limits 
and excesses over these limits. Attributing capital to credit risk employs standardized 
capital factors, which express the amount of credit risk as a function of rating and maturity. 
Attributing capital to operational risk assigns operational risk ratings to business lines or 
transactions based on the factors that lead to operational losses. 



LO 50.5 

Given a VaR estimate at a specified confidence level, market risk capital charge 
= F j (VaR) + F 2 [max(VaR limit — VaR, 0)] + F^ [max (VaR — VaR limit, 0)]. 

Credit capital charge = capital factor x market value of position. 

Operational risk capital may be allocated using a ranking system. 



LO 50.6 

While many sophisticated banks have developed sound methodologies for quantifying 
market and credit risks, operational risk measurement remains more an art than a science. 
This is a major concern because operational risks often represent an enormous potential loss 
to a financial institution. 
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LO 50.7 

Loan equivalencies are used to allocate economic capital to nonloan bank products. 



LO 50.8 

With the first-generation RAROC approach, a business adds value to the firm if the 
RAROC of a project exceeds the firms cost of equity. The flaw in the first-generation 
RAROC approach is its assumption that the probability of default remains constant. 



LO 50.9 

The second-generation RAROC approach measures an adjusted RAROC: 
ARAROC - (RAROC - R ^ 

Pe 

Accept the project if ARAROC > market risk premium. 
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Concept Checkers 



1 . What is the capital charge attributed to credit risk for a loan valued at $ 1 million 
and a capital factor equal to 3.24%? Assume that the loan interest rate is 5% and 
that the loan matures in three years. 

A. $32,400. 

B. $318,417. 

C. $986,617- 

D. $1,032,400. 

2. Assume that a loan has the following characteristics: 

• Gross revenue is expected to be $5.0 m i ll i on. 

• Interest expense is $3.0 million. 

• Expected return on the $6.0 million in economic capital is $175,000. 

• Expected loss on the loan is $250,000. 

• Other costs associated with making the loan equal $1.0 million. 

What is the risk-adjusted return on capital (RAROC) for this loan? 

A. 10.42%. 

B. 15.42%. 

C. 22.92%. 

D. 32.08%. 

3. What is the unexpected loss for a loan if the expected loss is 50 basis points, and the 
worst-case loss is 200 basis points at the 97.5% confidence level? 

A. 146.25 basis points. 

B. 150.00 basis points. 

C. 195.00 basis points. 

D. 250.00 basis points. 

4. What is the capital charge for market risk if: 

• The appropriate adjustment factor for the day-to-day event risk that is not 
captured in VaR is 1.75. 

• The multiplier used to determine the charge for the unused portion of the VaR 
limit is 0.20. 

• The multiplier used to determine the charge for exceeding the VaR limit is 2.75. 

• The VaR limit is $750,000. 

• VaR is $900,000. 

A. $1,162,500. 

B. $1,687,500. 

C. $1,987,500. 

D. $2,287,500. 
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What is the adjusted RAROC for a business if its RAROC is 19.5%, the firms 
equity beta is 1.15, and the risk-free rate is 8.50%? 



A. 


9.57%. 


B. 


12.65%. 


C. 


24.35%. 


D. 


32.20%. 
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Concept Checker Answers 



1. A 

2. B 

3. B 



capital charge = capital factor x market value of position = 0.0324 x $1,000,000 = $32,400 

(revenue — EL — expenses + return on economic capital it transfer price) 

RAROL = ; 

economic capital 

Note: All numbers are expressed in millions. 



R.moc- (5 ‘°-°‘ 25 o- 3,0 + O' 175-1 ‘ 0) 

6 



15.42% 



Unexpected loss is the loss at a specified confidence level (worst-case loss) minus expected 
loss. In this case, unexpected loss = 200 — 50 = 150 basis points. 



4. C The market risk capital charge is: 



F 1 (VaR) + F 2 [max(VaR limit — VaR, 0)] + [max (VaR - VaR limit, 0)] 



where: 

F 1 = a constant that adjusts for the day-to-day event risk not captured in the VaR model 
F 2 = the multiplier used to determine the charge for the unused portion of the VaR limit 
F 3 = the multiplier used to determine the charge for exceeding the VaR limit 

Thus, the capital charge for market risk is: 

1.75 ($900,000) + 0 + 2.75 ($900,000 - $750,000) = $1,987,500 



5. A 



ARAROC = 



RAROC-R F 

3e 



where: 

|3 e = systematic risk of the firms equity 
Rp = risk-free rate of return 



Thus, 



ARAROC 



19.50-8.50 

1.15 



9.57% 
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the learning objectives set forth by GARP®. This topic is also covered in: 



Range of Practices and Issues in 
Economic Capital Frameworks 



Topic 51 



Exam Focus 

This topic requires an understanding of many risk management concepts that you have 
already covered at FRM Part I, as well as in earlier readings in the FRM Part II curriculum. 
Specifically, this topic expands on the concept of economic capital, which is the capital 
required to absorb unexpected losses for a given time horizon and confidence interval. For 
the exam, pay attention to the terminology and attempt to integrate this material to the 
sections pertaining to market risk and credit risk so as to reinforce your understanding. 



Economic Capital Implementation Framework 



LO 51.1: Within the economic capital implementation framework describe the 
challenges that appear in: 

• Defining risk measures 

• Risk aggregation 

• Validation of models 

• Dependency modeling in credit risk 

• Evaluating counterparty credit risk 

• Assessing interest rate risk in the ha nki ng hook 



For this LO, it would be helpful to recall the properties of a coherent risk measure from the 
Part I curriculum. The properties are as follows: 

1 . Monotonicity: A portfolio with greater future returns will likely have less risk. 

2. Subadditivity: The risk of a portfolio is at most equal to the risk of the assets within the 
portfolio. 

3. Positive homogeneity: The size of a portfolio will impact the size of its risk. 

4. Translation invariance: The risk of a portfolio is dependent on the assets within the 
portfolio. 



Defining Risk Measures 

It is not always apparent how risk should be quantified for a given bank, especially when 
there are many different possible risk measures to consider. Prior to defining specific 
measures, one should be aware of the general characteristics of ideal risk measures. They 
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should be: intuitive, stable, easy to compute, easy to understand, coherent, and interpretable 
in economic terms. In addition, the risk decomposition process must be simple and 
meaningful for a given risk measure. 

Standard deviation, value at risk (VaR), expected shortfall (ES), as well as spectral 
(i.e., coherent) and distorted risk measures could be considered, each with their 
respective pros and cons. Obviously, no one measure would perfectly consider all of the 
necessary elements in measuring risk. In practice, VaR and ES are the most commonly 
used measures. The following section is a summary of challenges encountered when 
considering the appropriateness of each risk measure. 

Standard deviation 

• Not stable because it depends on assumptions about the loss distribution. 

• Not coherent because it violates the monotonicity condition. 

• Simple, but not very meaningful in the risk decomposition process. 

VaR (i the most commonly used measure j 

• Not stable because it depends on assumptions about the loss distribution. 

• Not coherent because it violates the subadditivity condition (could cause problems in 
internal capital allocation and li m it setting for sub-portfolios). 

Expected shortfall 

• May or may not be stable, depending on the loss distribution. 

• Not easy to interpret, and the link to the banks desired target rating is not clear. 

Spectral and distorted risk measures 

• Not intuitive nor easily understood (and rarely used in practice). 

• May or may not be stable, depending on the loss distribution. 

In defining or using such risk measures, banks often consider several of them and for 
different purposes. For example, absolute risk and capital allocation within the bank 
are most commonly measured using VaR, but increasingly, the latter is being measured 
using ES. The VaR measure of absolute risk tends to be easier to communicate to senior 
management than ES, but ES is a more stable measure than VaR for allocating total 
portfolio capital. The challenge for the ba n k is to determine if and when one or the other, 
or both, should be used. 

Amongst the commonly used measures to calculate economic capital, regulators do not have 
a clear preference for one over another. If different risk measures are implemented by a bank 
for external versus internal purposes, then there must be a logical connection between the 
two risk measures. For regulators, merely comparing a banks internal and regulatory capital 
amounts is insufficient when determining the underlying risks in its portfolio. Therefore, 
such a task presents an analytical challenge to regulators. 
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Risk Aggregation 

Risk aggregation involves identifying the individual risk types and making certain choices 
in aggregating those risk types. Classification by risk types (market, credit, operational, and 
business) may be approximate and prone to error. For example, the definitions of risk types 
may differ across banks or within a given bank, which complicates the aggregation process. 

Even though one or more of the previously mentioned four risk types may be found at the 
same time within a given bank portfolio, the portfolio will often be represented by one 
risk type for the banks classifications purposes. Such a simplistic distinction may result in 
inaccurate measurements of the risk types and this may bias the aggregation process. 

Most banks begin by aggregating risk into silos by risk-type across the entire bank. Other 
banks prefer using business unit silos, while others combine both approaches. There is no 
one unanimously accepted method, as each approach has its specific advantages. 

Before risk types can be aggregated into a single measure, they must be expressed in 
comparable units. There are three items to consider: risk metric, confidence level, and time 
horizon. 

1 . Risk metric: Relies on the metrics used in the quantification of different risk types. 
Must consider whether the metric satisfies the subadditivity condition. 

2. Confidence level: Loss distributions for different types of risk are assumed to 
have different shapes, which implies differences in confidence intervals. The lack 
of consistency in choosing confidence levels creates additional complexity in the 
aggregation process. 

3. Time horizon: Choosing the risk measurement time horizon is one of the most 
challenging tasks in risk measurement. For example, combining risk measures that have 
been determined using different time horizons creates problems irrespective of actual 
measurement methods used. Specifically, there will be inaccurate comparisons between 
risk types. 

A common belief is that combining two portfolios will result in lower risk per investment 
unit in the combined portfolio versus the weighted average of the two separate portfolios. 
However, when we consider risk aggregations across different portfolios or business 
units, such a belief does not hold up with VaR because it does not necessarily satisfy the 
subadditivity condition. Also, there may be a false assumption that covariance always fully 
takes into account the dependencies between risks. Specifically, there could be times where 
the risk interactions are such that the resulting combinations represent higher, not lower, 
risk. These points highlight an additional challenge in the computation of risk. 

There are five commonly used aggregation methodologies. The following is a brief 
description of them, as well as the challenges associated with using them. 

1 . Simple summation 

• Adding together individual capital components. 
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• Does not differentiate between risk types and therefore assumes equal weighting. 
Also, does not take into account the underlying interactions between risk types 
or for differences in the way the risk types may create diversification benefits. In 
addition, complications arising from using different confidence levels are ignored. 

2. Constant diversification 

• Same process as simple summation except that it subtracts a fixed diversification 
percentage from the overall amount. 

• Similar challenges as simple summation. 

3. Variance-covariance matrix 

• Summarizes the interdependencies across risk types and provides a flexible 
framework for recognizing diversification benefits. 

• Estimates of inter- risk correlations (a bank-specific characteristic) are difficult and 
costly to obtain, and the matrix does not adequately capture non-linearities and 
skewed distributions. 

4. Copulas 

• Combines marginal probability distributions into a joint probability distribution 
through copula functions. 

• More demanding input requirements and parameterization is very difficult to 
validate. In addition, building a joint distribution is very difficult. 

5. Full modeling/simulation 

• Simulate the impact of common risk drivers on all risk types and construct the joint 
distribution of losses. 

• The most demanding method in terms of required inputs. Also, there are high 
information technology demands, the process is time consuming, and it may provide 
a false sense of security. 

The variance-covariance approach is commonly used by ha nk s. Frequently, however, bank- 
specific data is not available or is of poor quality. As a result, the items in the variance- 
covariance matrix are completed on the basis of expert judgment. On a related note, banks 
often use a “conservative” variance-covariance matrix where the correlations are reported to 
be approximate and biased upward. In order to reduce the need for expert judgment, banks 
may end up limiting the dimensionality of the matrix and aggregating risk categories so 
that there are only a few of them, not recognizing that such aggregations embed correlation 
assumptions. Clearly, a disadvantage of such a practice is that each category becomes less 
homogenous and therefore, more challenging to quantify. 

One potential disadvantage of the more sophisticated methodologies is that they often lead 
to greater confidence in the accuracy of the output. It is important to consider robustness 
checks and estimates of specification and measurement error so as to prevent misleading 
results. 

Validation of Models 

Validation is the “proof” that a model works as intended. As an example, while it is a useful 
tool to test a models risk sensitivity, it is less useful for testing the accuracy of high quantiles 
in a loss distribution. 
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The validation of economic capital models differs from the valuation of an IRB (internal- 
ratings based) model because the output of economic capital models is a distribution rather 
than a single predicted forecast against which actual outcomes may be compared. Also, 
economic capital models are quite similar to VaR models despite the longer time horizons, 
higher confidence levels, and greater lack of data. 

There are six qualitative validation processes to consider. The following is a brief description 
of them, as well as the challenges associated with using them (where applicable). 

1 . Use test 

• If a bank uses its measurement systems for internal purposes, then regulators could 
place more reliance on the outputs for regulatory capital. 

• The challenge is for regulators to obtain a detailed understanding of which models 
properties are being used and which are not. 

2. Qualitative review 

• Must examine documentation and development work, have discussions with the 
models developers, test and derive algorithms, and compare with other practices and 
known information. 

• The challenge is to ensure that the model works in theory and takes into account the 
correct risk drivers. Also, confirmation of the accuracy of the mathematics behind 
the model is necessary. 

3. Systems implementation 

• For example, user acceptance testing and checking of code should be done prior to 
implementation to ensure implementation of the model is done properly. 

4. Management oversight 

• It is necessary to have involvement of senior management in examining the output 
data from the model and knowing how to use the data to make business decisions. 

• The challenge is ensuring that senior management is aware of how the model is used 
and how the model outputs are interpreted. 

5. Data quality checks 

• Processes to ensure completeness, accuracy, and relevance of data used in the 
model. Examples include: qualitative review, identifying errors, and verification of 
transaction data. 

6. Examination of assumptions — sensitivity testing 

• Assumptions include: correlations, recovery rates, and shape of tail distributions. 

The process involves reviewing the assumptions and examining the impact on model 
outputs. 

There are also six quantitative validation processes to consider. The following is a brief 
description of them, as well as the challenges associated with using them (where applicable). 

1 . Val i dation of inputs and parameters 

• Validating input parameters for economic capital models requires validation of those 
parameters not included in the IRB approach, such as correlations. 
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• The challenge is that checking model inputs is not likely to be fully effective because 
every model is based on underlying assumptions. Therefore, the more complex the 
model, the more likely there will be model error. Simply examining input parameters 
will not prevent the problem. 

2. Model replication 

• Attempts to replicate the model results obtained by the bank. 

• The challenge is that the process is rarely enough to validate models and in practice, 
there is little evidence of it being used by banks. Specifically, replication simply by 
re-running a set of algorithms to produce the same set of results is not considered 
enough model validation. 

3. Benchmarking and hypothetical portfolio testing 

• The process is commonly used and involves determining whether the model 
produces results comparable to a standard model or comparing models on a set of 
reference portfolios. 

• The challenge is that the process can only compare one model against another and 
may provide little comfort that the model reflects “reality.” All that the process is 
able to do is provide broad comparisons confirming that input parameters or model 
outputs are broadly comparable. 

4. Backtesting 

• Considers how well the model forecasts the distribution of outcomes — comparison 
of outcomes to forecasts. 

• The challenge is that the process can really only be used for models whose outputs 
can be characterized by a quantifiable metric with which to compare an outcome. 
Obviously, there will be risk measurement systems whose outputs cannot be 
interpreted this way. Also, backtesting is not yet a major part of banks’ validation 
practices for economic purposes. 

5. Profit and loss attribution 

• Involves regular analysis of profit and loss — comparison between causes of actual 
profit and loss versus the model s risk drivers. 

• The challenge is that the process is not widely used except for market risk pricing 
models. 

6. Stress testing 

• Involves stressing the model and comparing model outputs to stress losses. 

Overall, although these validation processes may be highly effective in areas such as risk 
sensitivity, they may not be effective in areas such as overall absolute accuracy. 

Additionally, there is difficulty in validating the conceptual soundness of a capital model. 
The development of a model almost always requires assumptions to be made. However, 
some of the assumptions may not be testable, so it could be impossible to be absolutely 
certain of the conceptual soundness of a model. Even though the underlying points may 
appear reasonable and logical, that may not be the case in practice. 

From a regulators perspective, some industry validation practices are weak, especially 
for total capital adequacy of the bank and the overall calibration of models. Such a 
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validation project is challenging because it usually requires evaluation of high quantiles of 
loss distributions over long periods of time. In addition, there are data scarcity problems 
plus technical difficulties, such as tail estimation. Therefore, it is important for senior 
management and model users to understand the limitations of models and the risks of using 
models that have not been fully validated. 

Dependency Modeling in Credit Risk 

Modeling the dependency structure between borrowers is crucial, yet challenging. Both 
linear and nonlinear dependency relationships between obligors need to be considered. 

In general, dependencies can be modeled using: credit risk portfolio models, models using 
copulas, and models based on the asymptotic single-risk factor (ASRF) model. With the 
ASRF approach, banks may use their own estimates of correlations or may use multiple 
systematic risk factors to address concentrations. Such an approach would result in 
questioning the method used to calibrate the correlations and the ways in which the bank 
addressed the infinite granularity and single- factor structure of the ASRF model. 

There are many issues to consider regarding the challenges in coming up with reliable 
dependency assumptions used in credit risk portfolio models. Regulators may need to test 
the accuracy and strength of correlation estimates used by banks given their heavy reliance 
on model assumptions and the significant impact on economic capital calculations. 

In the past, the validity of the following assumptions have been questioned: (1) the ASRF 
Gaussian copula approach, (2) the normal distribution for the variables driving default, 

(3) the stability of correlations over time, and (4) the joint assumptions of correctly 
specified default probabilities and doubly-stochastic processes, which suggest that default 
correlation is sufficiently captured by common risk factors. 

Doubts have been raised about the ability of some models using such assumptions in terms 
of their ability to explain the time-clustering of defaults that is seen in certain markets. 

Insufficiently integrating the correlation between probability of default (PD) and loss 
given default (LGD) in the models, coupled with insufficiently modeling LGD variability, 
may lead to underestimating the necessary economic capital. Furthermore, it will create 
challenges in identifying the different sources of correlations and the clustering of defaults 
and losses. 

Rating changes are greatly impacted by the business cycle and are explained by different 
models during expansionary and recessionary periods. As a result, the sample period and 
approach used to calibrate the dependency structure could be important in assessing 
whether correlation estimates are overestimated or underestimated. Furthermore, some 
models assume that unobservable asset returns may be approximated by changes in equity 
prices but fail to consider that the relationship between asset returns and equity prices are 
unobservable and may be non-linear. Also, the use of equity prices to estimate credit default 
probability is problematic because such prices may include information that is irrelevant for 
credit risk purposes. As a result, using equity prices may result in some inaccuracy in the 
correlation estimates. 
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In contrast, when banks use a regulatory- type approach, the assumptions of such an 
approach create other challenges for both banks and regulators: 

• Correlation estimates need to be estimated, but there may be limited historical data 
on which to base the correlation estimates. Also, the assumptions used to generate the 
correlations may not be consistent with the underlying assumptions of the Basel II credit 
risk model. 

• A banks use of the Basel II risk weight model requires concentration risk to be accounted 
for by other measures and/or management methods. It will also require regulators to 
evaluate such measures/ methods. 

A key challenge to overcome is the use of misspecified or incorrectly calibrated correlations 
and the use of a normal distribution (which does not replicate the details of the distribution 
of asset returns). This may lead to large errors in measuring portfolio credit risk and 
economic capital. 

Evaluating Counterparty Credit Risk 

Such a task is a significant challenge because it requires: obtaining data from multiple 
systems, measuring exposures from an enormous number of transactions (including many 
that exhibit optionality) spanning a wide range of time periods, monitoring collateral and 
netting arrangements, and categorizing exposures across many counterparties. As a result, 
banks need to have well-developed processes and trained staff to deal with these challenges. 

Market-risk-related challenges to counterparty exposure at default (EAD) estimation. 

• Counterparty credit exposure requires simulation of market risk factors and the 
revaluation of counterparty positions under simulated risk factor shocks, similar to VaR 
models. Consider the following two challenges that occur when attempting to use VaR 
model technology to measure counterparty credit exposure. 

♦ Market risk VaR models combine all positions in a portfolio into a single simulation. 
Therefore, gains from one position may fully offset the losses in another position in 
the same simulation run. However, counterparty credit risk exposure measurement 
does not allow netting across counterparties. As a result, it is necessary to compute 
amounts at the netting set level (on each set of transactions that form the basis of a 
legally enforceable netting agreement), which increases computational complexity. 

♦ Market risk VaR calculations are usually performed for a single short-term holding 
period. However, counterparty credit exposure measurement must be performed 
for multiple holding periods into the future. Therefore, market risk factors need 
to be simulated over much longer time periods than in VaR calculations, and the 
revaluation of the potential exposure in the future must be done for the entire 
portfolio at certain points in the future. 

Credit-risk-related challenges to PD and LGD estimation. 

• Some material transactions are performed with counterparties with which the bank does 
not have any other exposures. Therefore, the bank must calculate a probability of default 
(PD) and loss given default (LGD) for the counterparty and transaction. 

• For hedge funds, the measurement challenge occurs when there is little information 
provided on underlying fund volatility, leverage, or types of investment strategies 
employed. 

• Even for counterparties with which the bank has other credit exposures, the bank st i ll 
needs to calculate a specific LGD for the transaction. 
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Interaction between market risk and credit risk — wrong-way risk. 

• Identifying and accounting for wrong- way risk (exposures that are negatively correlated 
with the counterparty’s credit quality) is a significant challenge because it requires an 
understanding of the market risk factors to which the counterparty is exposed. That 
would be difficult to do in the case of a hedge fund, for example, which would be less 
transparent. 

• It also requires a comparison of those factor sensitivities to the factor sensitivities of the 
bank’s own exposures to the counterparty. 

• The magnitude of wrong-way risk is difficult to quantify in an economic capital model 
since it requires a long time horizon at a high confidence level. 

Operational-risk-related challenges in managing counterparty credit risk. 

• The challenge is that managing such risk requires specialized computer systems and 
people. Complicated transactions, such as daily limit monitoring, marking-to-market, 
collateral management, and intraday liquidity and credit extensions, increase the risk of 
measurement errors. 

• The quantification of operational risks is a significant challenge, especially when it 
pertains to new or rapidly growing businesses, new products or processes, intraday 
extensions of credit, and infrequently occurring but severe events. 

Differences in risk profiles between margined and non-margined counterparties. 

• The modeling difference between the two types of counterparties is primarily concerned 
with the future forecasting period. For margined counterparties, the forecasting period is 
short, and for non-margined counterparties, it is usually much longer. 

• As a result of the difference in time periods, the aggregation of risk between these two 
types of counterparties is a challenge because the usual procedure is to use a single time 
period for all positions. 

Aggregation challenges. 

• In general, the challenges are increased significantly when moving from measuring credit 
risk of one counterparty to measuring credit risk of the firm in general for economic 
capital purposes. 

• When counterparties have both derivatives and securities financing activities, the 
problem is especially challenging because the systems in place may not be able to handle 
such aggregation. 

• Further aggregation challenges exist when high-level credit risk measures are required 
to be aggregated with high-level market risk and operational risk measures in order to 
calculate economic capital. 

• Breaking down counterparty credit risk into detailed component parts (as is often 
done with market risk) is another challenge. The sheer computational complexities and 
enormous amounts of data required would generally be cost prohibitive to perform on a 
frequent basis. The challenge still remains for many banks due to outdated or ineffective 
computer systems. 
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Assessing Interest Rate Risk in the Banking Book 

The computation challenge arises from the long holding period assumed for a bank’s 
balance sheet and the need to model indeterminate cash flows on both the asset and liability 
side due to the embedded optionality of many banking book items. 

Optionality in the banking book. 

• A major measurement challenge is found with non-linear risk from long-term fixed- 
income obligations with embedded options for the borrower to prepay and from 
embedded options in non-maturity deposits. 

• In considering the asset side of the balance sheet, prepayment risk options 

(i.e., mortgages, mortgage-backed securities, and consumer loans) are the main form of 
embedded options. The prepayment option results in uncertain cash flows and makes 
interest rate risk measurement a difficult task. 

• In considering the liability side, there are two embedded options in non-maturity 
deposits: (1) the bank has an option to determine the interest rate paid to depositors 
and when to amend the rate, and (2) the depositor has the option to withdraw up to the 
entire balance with no penalty. The interaction between these two embedded options 
creates significant valuation and interest rate sensitivity measurement problems. 

• Sufficiently modeling optionality exposures requires very complex stochastic-path 
evaluation techniques. 

Banks’ pricing behavior. 

• This factor contributes to the challenges in measuring the interest rate risk of banking 
book items. For example, it would require a model to analyze the persistence of the many 
different non-maturity banking products, as well as a model to determine bank interest 
rates that consider general market conditions, customer relationships, bank commercial 
power, and optimal commercial policies. 

• Determining h an k interest rates would require the pricing of credit risk. The price 
of credit risk applied to different banking products creates a challenge because it 
would require a pricing rule that links the credit spread to changes in macroeconomic 
conditions and interest rate changes. Also, it means that interest rate stress scenarios 
should consider the dependence between interest rate and credit risk factors. 

The choice of stress scenarios. 

• The drawbacks of using simple interest rate shocks pose interest rate measurement 
challenges because the shocks: 

♦ Are not based on probabilities and, therefore, are difficult to integrate into economic 
capital models based on VaR. 

♦ Are not necessarily sensitive to the current rate or economic environment. 

♦ Do not take into account changes in the slope or curvature of the yield curve. 

♦ Do not allow for an integrated analysis of interest rate and credit risks on banking 
book items. 
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BIS Recommendations for Supervisors 



LO 51 . 2 : Describe the BIS recommendations that supervisors should consider to 
make effective use of risk measures not designed for regulatory purposes. 



There are ten Bank for International Settlements (BIS) recommendations to consider: 

1 . Use of economic capital models in assessing capital adequacy. The bank should show 
how such models are used in the corporate decision-making process so as to assess 

the model’s impact on which risks the bank chooses to accept. In addition, the board 
should have a basic understanding of the difference between gross (stand alone) and net 
(diversified) enterprise-wide risk in assessing the bank’s net risk tolerance. 

2. Senior management. The economic capital processes absolutely require a significant 
commitment from senior management. They should understand its importance in the 
corporate planning process and should ensure that there is a strong infrastructure in 
place to support the processes. 

3. Transparency and integration into decision-making. Economic capital results need 
to be easy to trace and understand in order to be useful. Careful attention must be 
given to obtaining reliable estimates on an absolute basis in addition to developing the 
flexibility to conduct firm-wide stress testing. 

4. Risk identification. This is the crucial starting point in risk measurement. The risk 
measurement process must be very thorough to ensure that the proper risk drivers, 
positions, and exposures are taken into account in measuring economic capital. That 
will ensure that there is little variance between inherent (actual) and measured risk. For 
example, risks that are difficult to quantify should be considered through sensitivity 
analysis, stress testing, or scenario analysis. 

5. Risk measures. No given risk measure is perfect, and a bank must understand the 
strengths and weaknesses of its chosen risk measures. No one risk measure for economic 
capital is universally preferred. 

6. Risk aggregation. The reliability of the aggregation process is determined by the 
quality of the measurement risk components, plus the interrelationships between such 
risks. The aggregation process usually requires consistency in the risk measurement 
parameters. The aggregation methodologies used should mirror the banks business 
composition and risk profile. 

7. Validation. The validation process for economic capital models must be thorough 
and corroborating evidence from various tests must show that the model “works” as 
intended. In other words, within an agreed upon confidence interval and time period, 
the capital level determined must be enough to absorb the (unexpected) losses. 
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8. Dependency modeling in credit risk. Banks must consider the appropriateness of the 
dependency structures used within their credit portfolio. Specifically, credit models 
need to be assessed for their limitations, and such limitations need to be dealt with via 
appropriate supplementary risk management approaches, such as sensitivity or scenario 
analysis. 

9. Counterparty credit risk. There are trade-offs to be considered in deciding between 
the available methods of measuring counterparty credit risk. Additional methods, such 
as stress testing need to be used to help cover all exposures. Measuring such risk is 
complicated and challenging. Specifically, the aggregation process needs to be vetted 
prior to a bank having a big picture perspective of counterparty credit risk. 

1 0. Interest rate risk in the banking book. Specifically, financial instruments with 
embedded options need to be examined closely in order to control risk levels. Certainly, 
there are trade-offs between using earnings-based versus economic value-based models 
to measuring interest rate risk. For example, the former has aggregation problems 
because other risks are measured using economic value. Also, using economic value- 
based models could be inconsistent with business practices. 

Economic Capital Constraints and Opportunities 



LO 51.3: Describe the constraints imposed and the opportunities offered by 
economic capital within the following areas: 

• Credit portfolio management 

• Risk based pricing 

• Customer profitability analysis 

• Management incentives 



Credit Portfolio Management 

Constraints imposed: 

• Credit quality of each borrower is determined in a portfolio context, not on a stand- 
alone basis. 

• A loan’s incremental risk contribution is used to determine the concentration of the loan 
portfolio. 

Opportunities offered: 

• The process allows one to determine appropriate hedging strategies to use in reducing 
portfolio concentration. 

• Credit portfolio management becomes a means for protecting against risk deterioration. 
Risk-Based Pricing 

Constraints imposed: 

• Pricing decisions are based on expected risk-adjusted return on capital (RAROC), so 
deals will be rejected if they are lower than a specific RAROC. The proposed interest rate 
is determined by the amount of economic capital allocated to the deal. 
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• Pricing decisions include: (1) cost of funding, (2) expected loss, (3) allocated economic 
capital, and (4) additional return required by shareholders. Therefore, a minimum 
interest rate is determined that will increase shareholder value. 

Opportunities offered: 

• Can be used to maximize the banks profitability. For example, some pricing decisions 
may need to be overridden because certain customer relationships are more profitable 
(at a lower price/interest rate) or desirable from a reputational point of view. Of course, 
such overrides are not taken lightly and require upper management approval, as well as 
rigorous subsequent monitoring. 

Customer Profitability Analysis 

Constraints imposed: 

• The analysis is complicated in that many risks need to be aggregated at the customer 
level. 

• Customers need to be segmented in terms of ranges of (net) return per unit of risk; the 
underlying information is difficult to measure and allocate. 

Opportunities offered: 

• Assuming that the measurement obstacles have been overcome, the analysis can be easily 
used to determine unprofitable or only slightly profitable customers. Such customers 
could be dropped and economic capital allocated to the more profitable customers. 

• Economic capital is used in maximizing the risk-return trade-off (through relative risk- 
adjusted profitability analysis of customers). 

Management Incentives 

Constraints imposed: 

• Studies show that compensation schemes are a minor consideration in terms of the actual 
uses of economic capital measures at the business unit level. 

Opportunities offered: 

• It is suggested that management incentives is the issue that motivates bank managers to 
participate in the technical aspects of the economic capital allocation process. 
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Key Concepts 



LO 51.1 

A multitude of challenges exist within the economic capital framework that involve: 

(1) defining risk measures, (2) risk aggregation, (3) validation of models, (4) dependency 
modeling in credit risk, (5) evaluating counterparty credit risk, and (6) assessing interest rate 
risk in the banking book. 



LO 51.2 

There are ten BIS recommendations that supervisors should consider to make effective use 
of risk measures. 



LO 51.3 

A number of specific constraints imposed and opportunities offered by economic capital 
exist within the areas of credit portfolio management, risk based pricing, customer 
profitability analysis, and management incentives. 
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Concept Checkers 



1 . Which of the following risk measures is the least commonly used measure in the 
practice of risk management? 

A. Value at risk. 

B. Standard deviation. 

C. Expected shortfall. 

D. Spectral risk measures. 

2. Which of the following aggregation methodologies is characterized by great difficulty 
in validating parameterization and building a joint distribution? 

A. Copulas. 

B. Constant diversification. 

C. Variance-covariance matrix. 

D. Full modeling/simulation. 

3. Which of the following model validation processes is specifically characterized by the 
limitation that it provides little comfort that the model actually reflects reality? 

A. Backtesting. 

B. Benchmarking. 

C. Stress testing. 

D. Qualitative review. 

4. Which of the following categories of BIS recommendations specifically refers to the 
need to consider using additional methods, such as stress testing, to help cover all 
exposures? 

A. Risk aggregation. 

B. Counterparty credit risk. 

C. Dependency modeling in credit risk. 

D. Interest rate risk in the banking book. 

5. The use of which of the following items is meant more for protecting against risk 
deterioration? 

A. Risk based pricing. 

B. Management incentives. 

C. Credit portfolio management. 

D. Customer profitability analysis. 
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Concept Checker Answers 



1 . D Spectral and distorted risk measures are the least used of the four measures and are mainly of 

academic interest only. 

2. A Copulas have two notable disadvantages: (1) parameterization is very difficult to validate, and 

(2) building a joint distribution is very difficult. 

3. B With benchmarking and hypothetical portfolio testing, the process has its limitations 

because it can only compare one model against another and may provide little comfort 
that the model actually reflects “reality.” All that the process is able to do is provide broad 
comparisons confirming that input parameters or model outputs are broadly comparable. 

4. B There are trade-offs to be considered when deciding between the available methods of 

measuring counterparty credit risk. Additional methods, such as stress testing, need to be 
used to help cover all exposures. 

5. C Credit portfolio management is used as a means to protect against risk deterioration. In 

contrast, risk based pricing is used to maximize the bank’s profitability; customer profitability 
analysis is used to determine unprofitable or only slightly profitable customers; and 
management incentives are used to motivate managers to participate in the technical aspects 
of the economic capital allocation process. 
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the learning objectives set forth by GARP®. This topic is also covered in: 

Capital Planning at Large Bank 
Holding Companies: Supervisory 
Expectations and Range of Current 
Practice 



Topic 52 

Exam Focus 

To protect the smooth functioning of bank holding companies (BHCs), the Federal 
Reserves Capital Plan Rule requires BHCs to implement an ongoing internal capital plan for 
thoroughly assessing and enhancing their capital adequacy under stress scenarios on a firm- 
wide basis. For the exam, know the fundamental principles and key practices to develop and 
implement an effective internal control plan, including: risk identifications, model valuation 
and review, oversight and governance, contingency planning, stress testing and scenario 
designing, loss estimation and projections methodologies, and evaluating the impact of 
capital adequacy, including risk-weighted assets and balance sheet projections. 



Capital Plan Rule 



LO 52 . 1 : Describe the Federal Reserves Capital Plan Rule and explain the seven 
principles of an effective capital adequacy process for bank holding companies 
(BHCs) subject to the Capital Plan Rule. 



Bank holding companies (BHCs) must have adequate and sufficient capital for their 
survival and growth. Capital provides a cushion against unexpected losses and allows BHCs 
to continue to operate. The failure of BHCs (i.e., liabilities exceed assets, resulting in 
negative capital) would most likely be a burden on taxpayers and deposit insurance funds. 
An effective and sound capital management policy is critical for the health of BHCs, as well 
as the smooth functioning and stability of the entire financial system. 

The Federal Reserve maintains its interest in survivability and smooth functioning BHCs 
through its Capital Plan Rule and the annual Comprehensive Capital Analysis and Review 
(CCAR). The CCAR is the Federal Reserves supervisory program for evaluating capital 
plans. 

The Capital Plan Rule mandates that BHCs develop and put in place a capital plan 
and a process to evaluate and monitor their capital adequacy. The capital plan covers all 
U.S. domiciled BHCs with total consolidated assets equal to $50 billion or more. 

The Capital Plan Rule lists the principles that the Federal Reserve uses to evaluate the 
adequacy and appropriateness of a BHCs internal capital planning processes and practices. 
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The principles on which the Federal Reserve assesses BHCs for managing and allocating 

their capital resources is referred to as the capital adequacy process (CAP). The seven 

principles of the CAP are as follows: 

1 . Risk management foundation. A BHC has an effective capital risk management plan 
to encompass all key risk exposures on a firm-wide basis in terms of identification, 
evaluation, measurement, and control. 

2. Resource estimation methods. A BHC has a capital resource estimation plan to clearly 
define and estimate available capital resources over a stress scenario time horizon. 

3. Loss estimation methods. A BHC has a process for estimating potential losses and 
aggregating them on a firm-wide basis over a given stress scenario time horizon. 

4. Impact on capital adequacy. A BHC has a process to evaluate the combined impact on 
capital adequacy — given loss estimates and capital resources combined — in light of the 
stated goals with respect to capital level and composition. 

5. Capital planning policy. A BHC has a sound capital policy to develop capital goals, 
determine appropriate capital levels and composition as well as capital distributions 
(actions) and contingency plans. 

6. Internal controls. A BHC has a vigorous internal controls policy in place for 
independent review, model validation, documentation, and internal audit of the capital 
adequacy process. 

7. Effective oversight. A BHC has a board and senior management responsible for an 
effective and thorough oversight of multiple dimensions of the internal capital risk 
plan, including methods, processes, assessments, validations, reviews, documentation, 
infrastructure, resources, goals, limitations, and approval of capital decisions. 
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Capital Adequacy Process 



LO 52 . 2 : Describe practices which can result in a strong and effective capital 
adequacy process for a BHC in the following areas: 

* Risk identification 

* Internal controls, including model review and valuation 

* Corporate governance 

* Capital policy, including setting of goals and targets and contingency pl an ning 

* Stress testing and stress scenario design 

* Estimating losses, revenues, and expenses, including quantitative and 
qualitative methodologies 

* Assessing the impact of capital adequacy, including RWA and balance sheet 
projections 



For this LO, we detail the seven key practices that can result in a strong and effective capital 
adequacy process for a BHC. 

Risk Identification 

BHCs should have a process in place to identify all risk exposures stemming from numerous 
sources, including stress conditions, changing economic and financial environments, on- 
and-off balance sheet items, and their impact on capital adequacy. In addition, BHCs 
should critically scrutinize underlying assumptions regarding risk reduction through risk 
mitigation or risk transfer techniques. Senior management should regularly update and 
review the risk identification plan with special consideration for how their risk profiles 
might change under stress scenarios. Risk identification techniques should be able to detect 
the changes in the overall risk profile as well as the signs of capital inadequacy in the early 
stages. 

BHCs should integrate the identified risk exposures into their internal capital planning 
processes. Scenario-based stress testing may not capture all potential risks faced by 
BHCs, some risks are difficult to quantify or they do not fall into the integrated firm- 
wide scenarios. However, such risks must be included and accounted for in the capital 
planning processes. These risks are categorized as “other risks,” and their examples include 
compliance, reputational, and strategic risks. There are a variety of methods which BHCs 
can employ, including internal capital targets to incorporate such risks. 

Internal Controls 

An internal audit team should carefully scrutinize the internal control data for accuracy 
before submitting to senior management and the board. BHCs should have efficiently 
running management information systems (MIS) for collecting and analyzing pertinent 
information set quickly and accurately. 

In addition, BHCs should put in place a detailed and organized documentation system fully 
encompassing all dimensions of capital planning processes, including risk identification, loss 
estimation techniques, capital adequacy, and capital decision processes. 
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There must be a thorough, independent, and regular review and validation of all models 
used for internal capital planning purposes, including assessment of conceptual soundness 
of models and verification of processes. A validation team should have a required technical 
skill set as well as complete independence from all business areas of the BHC and model 
developers. Such independence is crucial for the validation team to offer an unbiased, 
independent, and valuable verdict. 

BHCs should maintain and update a list of all inputs, assumptions, and adjustments for 
the models used to generate final projections and estimates, such as income, loss expenses, 
and capital. These models should be validated for their effective use, not only under 
normal conditions, but also under stress conditions. BHCs should make full disclosure of 
their validation process and outcome, and should restrict the use of models which are not 
validated. 

Governance 

BHCs should have boards with sufficient expertise and involvement to fully understand and 
evaluate the information provided to them by senior management regarding their capital 
planning processes. The board should be furnished with comprehensive information with 
respect to risk exposures, loss estimates, determinants of revenues and losses, underlying 
models and assumptions, and weaknesses and strengths of capital planning processes. 

Also, the boards should be informed about the stress scenarios and any corrective measures 
undertaken as a result of stress testing outcomes. 

Under the Capital Plan Rule, the management of BHCs is required to furnish key 
information to the board for its approval of internal capital adequacy plans. Such 
information should include underlying assumptions and results of stress testing and the 
outcome of internal audits, as well as model review and validation checks. 

Senior management should evaluate the internal capital plan on an ongoing basis, focusing 
on key weaknesses, strengths, assumptions, scenarios, estimates, and models. In addition, 
senior management should make appropriate adjustments and remediation to the capital 
plan if the review process reveals shortcomings in the plan. 

BHCs should maintain detailed minutes of board meetings, describing the issues raised 
and discussed, as well as the information used and the recommendations made in these 
meetings. 

Capital Policy 

A capital policy should clearly define the principles and guidelines for capital goals, 
issuance, usage, and distributions. The policy should also fully spell out the details of 
the BHCs capital planning processes, including the decision rules of capital usage and 
distribution, financing, and other policies. The capital policy should focus on the unique 
needs and financial situation of BHCs while taking into consideration the supervisory 
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expectations. Policies regarding common stock dividends and repurchase agreements should 
include the following: 

• Key metrics influencing the size, timing, and form of capital distributions. 

• Materials used in making capital distribution decisions. 

• Specific scenarios that would cause a distribution to be reduced or suspended. 

• Situations that would cause the BHC to consider replacing common equity with other 
forms of capital. 

• Key roles and responsibilities of individuals or groups for producing reference materials, 
making distribution recommendations and decisions, and reviewing analysis. 

Capital goals developed by BHCs should be compatible with their risk tolerance, risk 
profile, regulatory requirements, and expectations of various stakeholders (e.g., shareholders, 
creditors, supervisors, and rating agencies). BHCs should establish specific goals for both 
the level and composition of capital under normal as well as stress conditions. Capital 
targets, which need to be set above the capital goals for capital adequacy under stress 
conditions, should take into consideration future economic outlooks, stress scenarios, and 
market conditions. 

While setting capital distribution levels, BHCs must take into consideration numerous 
factors, including future growth plans (including acquisitions) and associated risk, current 
and future general economic conditions, in particular the impact of macroeconomic and 
global events during stress conditions, on their capital adequacy. Capital distribution 
decisions must be connected to capital goals or capital adequacy requirements. 

BHCs should develop strong contingency planning offering numerous options to deal with 
contingency situations as well as their effectiveness under stress conditions. Contingency 
plans should be based on realistic assumptions and contain futuristic outlooks, rather than 
overly relying on history. Contingency actions should be feasible and realistic in the sense 
that they should be easy to implement when or if the contingency warrants. Capital triggers 
flagging the early warning of capital deterioration should be based on the projected results, 
regulatory requirements, and the expectations of various stakeholders, including creditors, 
shareholders, regulators, investors, and counterparties. 

Stress Testing and Stress Scenario Design 

Scenario design and stress testing should focus on unique situations of BHCs, their asset 
and liability mix, portfolio composition, business lines, geographical territory, and revenue 
and loss factors, while taking into consideration the impact of macroeconomic and firm- 
specific vulnerabilities and risks. That is, the stress test designing should go above and 
beyond the general guidelines established by the supervisory authority. Also, a BHC’s 
scenario designing and testing should not employ optimistic assumptions benefiting the 
BHC. 

BHCs should employ both an internal model and expert judgment, an outside expert’s 
opinion. If only a third-party model is used, it must be tailored to the unique risk profile 
and business model of a BHC. The designed scenarios should assume a strong strain on the 
revenue and income of BHCs. 
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Stress testing models should be based on multiple variables encompassing all the risk 
exposures faced by BHCs on a firm-wide basis. For example, BHCs concentrated in a 
region, business, or industry should include relevant region, business, or industry-related 
variables. In addition, the scenarios should clearly spell out how they address specific risks 
faced by BHCs. The description should also provide explanations of how a scenario stresses 
specific BHC weaknesses and how variables are related to each other. 

Estimating Losses, Revenues, and Expenses 



Quantitative and Qualitative Basis 

BHCs should prefer using internal data to estimate losses, revenues, and expenses. However, 
in certain situations, it may be more appropriate to use external data. In these instances, it 
should be ensured that the external data reflects the underlying risk profile of their business 
lines, and necessary adjustments should be made to data input or output to make the 
analysis reflect a true picture of the BHCs unique characteristics. 

A range of quantitative methods are available to BHCs for estimating losses, revenues, and 
expenses. Regardless of which method they use, the final outcome should be identification 
of key risk factors and impact of changing macro and financial conditions under normal 
and stress conditions on a firm-wide basis. 

In addition, BHCs should segment their line of businesses and portfolios utilizing common 
risk characteristics showing marked differences in past performances. For example, a 
borrowers risk characteristics can be segmented by criteria such as credit score ranges. 
However, each risk segment should have sufficient data observations on losses, revenues, 
and expenses, (and underlying factors impacting losses, revenues, and expenses) in order to 
generate meaningful model estimates. 

Past relationships between losses, revenues, expenses, and underlying driving factors, and 
their interrelationships may not hold in the future, thus, necessitating employment of 
sensitivity analysis (to answer “what if” questions) when using models based on historical 
underlying interactions. 

BHCs sometimes use qualitative methodologies, like expert judgment or management 
overlay, as a substitute or a complement to quantitative methods. Qualitative techniques 
should be based on sound assumptions, and an external reviewer should find these 
approaches logical, reasonable, and clearly spelled out. A sensitivity analysis should be used 
for a qualitative approach as well. From a supervisory standpoint, BHCs are expected to 
use conservative assumptions, not favorable to BHCs, for estimating losses, revenues, and 
expenses under normal and stress conditions. 

Loss Estimation Methods 

BHCs should employ loss estimation methods, which offer theoretical soundness and 
empirical validity. In addition to using general macroeconomic explanatory variables, the 
loss estimation models should use specific variables exhibiting a direct link to particular 
exposures and portfolios. 
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BHCs should use uniform, reputable methods to aggregate losses across various lines of 
business and portfolios for firm-wide scenario analysis. They should also use automated 
processes, without manual intervention or managerial adjustments showing clear linkage 
from data sources to loss estimation and aggregation. For estimating retail loan losses, BHCs 
often use internal data, but for wholesale loss estimation, internal data is supplemented 
with external data. In the case using external data, BHCs should demonstrate that the data 
reflects their risk exposures, encompassing geographic, industry, and other key dimensions. 

Risk segmentation should be supported by the data capturing the unique characteristics of 
each risk pool. 

BHCs can use either an economic loss approach (i.e., expected losses) or an accounting- 
based loss approach (i.e., charge-off and recovery) to estimate credit losses. For the expected 
loss approach, BHCs should categorize losses into probability of default (PD), loss given 
default (LCD), or exposure at default (EAD) and then identify the determinants of each 
component. Long run averages for PDs, LGDs, and EADs should not be used, as these 
averages reflect economic downturn and upturn periods not necessarily suitable for scenario 
testing under stress conditions. LGD should be linked to underlying risk factors, such as a 
fall in the value of collateralized assets under stress conditions, and it should be estimated at 
some level of segmentation, such as lending product or type of collateral. EADs should be 
modeled to exhibit variation depending on changes in macroeconomic conditions. 

If BHCs are using rating systems as a key input to estimate expected losses under stress 
(e.g., on their wholesale portfolios), they should recognize the limitations in rating systems 
and their data and make necessary adjustments. 

BHCs should utilize a robust time series with sufficient granularity while employing role- 
rate models to estimate the rate at which delinquent and non-delinquent accounts in 
the current quarter are expected to roll over into default or delinquent status in the next 
quarter. 

If using charge-off models (i.e., accounting models), BHCs should include variables which 
represent the risk characteristics of an underlying portfolio while estimating the statistical 
relationship between charge-off rates and macroeconomic variables at the portfolio level. 

Operational Risk 

In order to determine operational risk, many BHCs estimate correlation between 
operational risk and macroeconomic factors. If they do not discover a statistically significant 
relationship between the variables, they employ other methods, including scenario analysis 
utilizing historical data and management input. BHCs should employ a combination of 
techniques to develop strong loss estimates under stress conditions, including past loss 
records, future expected events, macro conditions, and firm-specific risks. 

BHCs using regression models to estimate loss frequency and loss severity under stress 
scenarios should provide statistical support for the period chosen for estimation purposes 
instead of arbitrary and judgmental selection. 

A modified loss distribution approach (LDA) is also used by BHCs to estimate value at risk 
(VaR) to estimate operational risk losses at a chosen confidence interval (e.g., 90% or 95%). 
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To generate a strong and effective process, BHCs should offer a sound justification for their 
choice and perform a sensitivity analysis around the chosen interval. 

Some BHCs use scenario analyses in case they encounter model or data limitations in order 
to incorporate a wide range of risks (which is not possible otherwise due to data or model 
limitations). In such events, BHCs should provide a rationale for the chosen scenario in 
their loss estimation process. 

Market Risk and Counterparty Credit Risk 

BHCs, which are involved in trading, are subject to counterparty credit risk from changes 
in the value of risk exposure and creditworthiness of the counterparty due to changing 
macroeconomic conditions. 

In order to estimate the potential loss resulting from market credit interaction, BHCs use 
probabilistic approaches (which produce a probability distribution of expected portfolio 
losses) and deterministic approaches (which yield point estimates of an expected portfolio 
loss). 

BHCs using probabilistic approaches should clearly offer evidence that such methods can 
yield more severe risk scenarios compared to historical scenarios. BHCs should also explain 
how they utilize tail loss scenarios to detect and address firm-specific risks. 

BHCs using deterministic approaches should demonstrate that they have employed a wide 
range of scenarios, adequately covering their key risk exposures, including mark-to-market 
positions in the event of firm-specific or market-wide stress conditions. In addition, BHCs 
should clearly spell out the underlying assumptions employed in stress testing scenarios for 
risk measurement purposes and corrective measures to fix the identified deficiencies. 

Market shock scenarios do not directly incorporate the default of the counterparty. Some 
BHCs explicitly incorporate the scenario of default of key counterparties (including key 
customers) while using some sort of probabilistic approach involving some estimates of the 
PD, LGD, and EAD of counterparties. This method allows BHCs to focus exclusively on 
the defaults of counterparties to which BHCs have large risk exposure. 

BHCs also use assumptions about risk mitigation in the future. Such assumptions, if used, 
should be conservative in nature. In stress scenarios, the ability of BHCs to take desired 
actions may be limited. 

PPNR Projection Methodologies 

PPNR is pre-provision net revenue (i.e., net revenue before adjusting for loss provisions). 
While estimating revenues and expenses over a planning horizon under stressed conditions 
(the Capital Plan Rule requires forecasts over the next nine quarters), BHCs should not 
only take into consideration their current situation, but also the possible future paths of 
business activities and operational environments related to their on- and off-balance sheet 
risk exposures, underlying assumptions, and assets and liabilities. 
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BHCs should also take into consideration the impact of regulatory changes on their 
performance and ability to achieve their stated targets and goals. Projections should be 
based on coherent and clearly defined relationships among numerous, relevant variables, 
such as revenues, expenses, and balance sheet items within a given scenario. For example, 
assumptions related to origination should be the same for projections related to loans, fees, 
costs, and losses. 

Underlying assumptions for revenues, expenses, and loss estimates should be theoretically 
and empirically sound, and the central planning group as well as the corporate planning 
group should be engaged in aggregating projections on an enterprise-wide basis. In the case 
of limited data, BHCs should employ external data in conjunction with internal data. 

Net interest income projections are not isolated projections; rather, they are entrenched 
with other items of a capital adequacy plan. Balance sheet assumptions should be consistent 
while projecting net interest income. For example, balance sheet assumptions for projecting 
net interest income should be the same when estimating loss. Methods employed for 
projecting net interest income should incorporate ongoing changes in current and projected 
balance sheet positions. 

BHC projections under various scenarios, based on product characteristics (e.g., a change 
in deposit mix due to increased demand for time deposits), underlying assumptions, and 
rationale by product should be carefully explained. 

BHCs linking loss projections to net interest income projections should clearly establish this 
link while using modeling approaches, which incorporate the behavioral characteristics of 
the loan portfolio. 

Net interest income projections should be based on methodologies that incorporate 
discount or premium amortization adjustments for assets not held at par value that would 
materialize under different scenarios. 

New business pricing projections and underlying assumptions, such as constant add-ons 
to a designated index value, should be compatible with past data, scenario conditions, and 
BHCs’ balance sheet projections. 

BHCs should project non-interest income in light of stated scenarios and business 
strategies. Projection methods should fully encompass underlying major risk exposures and 
characteristics of a specific business line. For example, an asset management group should 
project non-interest income using various methods, including brokerage as well as money 
management revenues. 

Additionally, BHCs with trading portfolios should establish a clear link between trading 
revenue projections to trading assets and liabilities and the compatibility of all the elements 
of stress scenario conditions. 

BHCs with off-balance sheet business items should demonstrate the linkage between 
revenue projections and changes in on- and off-balance sheet items. 
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BHCs should not assume perfect correlation between revenues (generated from trading or 
private equity activity) and broad indices. BHCs should estimate the sensitivity coefficients 
for changes in revenue as a result of changes in broad index movements. 

Furthermore, BHCs holding mortgage servicing rights assets (MSRAs) should carefully 
design assumptions regarding default, prepayment, and delinquency rates, ensuring that 
these assumptions are robust and scenario specific. In addition, BHCs that hedge MSRA 
risk exposure should generate scenario specific assumptions. 

For BHCs, projecting volume increases in mortgage loans while ignoring market saturation 
or other key factors would be an ineffective and weak process, whereas consideration 
of individual business models, client profiles, and capacity constraint (while projecting 
mortgage loan volume) would be an effective and strong capital adequacy process. 

Macroeconomic relationships should be based on sound theoretical construct and supported 
by empirical evidence. For example, BHCs may experience a steep decline in credit card 
fee revenues in a strong recessionary period because of a decline in consumer spending. 

An example of a weaker practice of a capital planning process is if a BHC does not show a 
sufficient decline in revenue in stressed conditions despite obvious macro relationships. 

In addition, BHCs should utilize a wide set of explanatory variables to develop statistical 
relationships. BHCs should take into consideration the impact of macroeconomic 
conditions, such as an economic downturn, on their non-interest expense projections. Non- 
interest expense projections, like all other projections, should be consistent with revenue 
and balance sheet estimates and should generate the same underlying strategic assumptions. 
If projections assume that a decline in revenue (e.g., due to an increase in credit collection 
costs in an economic downturn) can be offset by some mitigating strategies, BHCs should 
then clearly demonstrate the feasibility of such actions. Mitigation actions should not be 
supported by past relationships and actions only because future financial, macro, and global 
environments may not be as favorable to execute such strategies, as was the case in the past. 

Estimation methods to project non-interest expense should focus on uncovering 
determina n ts (factors) of individual expense items and how sensitive those factors are to 
changing macro conditions and business strategies. 

Assessing the Impact of Capital Adequacy 

BHCs should have a well-defined and well-documented process of generating projections 
with respect to size and composition of on- and off-bala n ce sheet items and risk-weighted 
assets (RWA) over a stress horizon period. 

Projecting balance sheet items, such as changes in assets and funding, directly without 
consideration of underlying drivers (of such changes), would be a weak practice. BHCs 
should identify the impact of changes in key factors on changes in asset and liabilities. 
Projections should take into consideration these vital relationships. 

BHCs should incorporate relationships between revenues, expenses, and balance sheet 
items into their scenario analyses. Projections about losses, revenues, expenses, and on- and 
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off-balance sheet items should not be based on favorable underlying assumptions. These 
assumptions may not stand the trial of uncertain market conditions under stress conditions. 

Projections for RWA should be consistent with the projections for risk exposures of on- 
and off-balance sheet items. All underlying assumptions used for balance sheet and RWA 
projections should be clearly documented and critically reviewed and validated. 

BHCs with a strong process of implementation should form a centralized group responsible 
for aggregating loss, revenue, expense, on- and off-balance sheets, and RWA projections for 
enterprise- wide scenario analysis. In addition, BHCs should establish a strong governance 
structure to critically scrutinize assumptions, methods, and estimates generated in an 
enterprise- wide scenario analysis and offer needed adjustments. BHCs should carefully 
evaluate the validity and relevance of underlying assumptions across business lines, 
portfolios, loss, expense, and revenue estimates if an enterprise- wide scenario analysis 
produces post-stress results that are more favorable than the baseline conditions. The 
outcomes of such analyses should also be reconciled for regulatory as well as management 
reporting purposes. 
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Key Concepts 



LO 52.1 

The Federal Reserve’s Capital Plan Rule mandates all top-tier, U.S. domiciled bank holding 
companies with consolidated assets equal to or greater than $50 billion to develop and 
maintain an effective and robust internal capital plan for evaluating and assessing their 
capital adequacy. 

There are seven principles on which the Federal Reserve assesses the effectiveness of a BHCs 
internal capital planning, also known as the capital adequacy process (CAP). These seven 
principles are related to risk management foundation, resource and loss estimation methods, 
capital adequacy, capital planning and internal controls policies, and governance oversight. 



LO 52.2 

BHCs should develop a process to effectively identify all of their risk exposures on a firm- 
wide basis. BHCs should establish a mechanism for a comprehensive, independent, and 
regular review and validation of all the models used for capital adequacy planning purposes. 
BHCs should have boards actively involved in evaluating and approving their internal 
capital adequacy plans. BHCs should develop a capital policy that clearly defines the 
principles and guidelines for capital goals, issuance, usage, and distributions. 

Stress testing and stress scenario design should be based on a variety of factors encompassing 
all the risk exposures faced by BHCs on a firm-wide basis. With the option of utilizing 
various quantitative and qualitative methods, BHCs should carefully identify key risk 
exposures on a firm- wide scenario basis. BHCs should use loss estimation methodologies, 
which are based on sound theoretical and empirical foundations. BHCs should use a 
combination of inputs in order to develop loss estimates arising from operational risk. 

In order to estimate the counterparty credit risk, BHCs mostly use probabilistic or 
deterministic approaches. BHCs using a probabilistic approach should offer evidence 
of generating probable scenarios stronger than past observed events. BHCs using a 
deterministic approach should generate a wide range of stress scenarios. 

While estimating pro-provision net revenue (PPNR) projection methodologies, BHCs 
should pay particular attention to interrelationships among numerous relevant variables 
such as revenues, expenses, and on- and off-balance sheet items within a given scenario. 
Methodologies used for projecting net interest income should incorporate ongoing, current, 
and projected balance sheet positions. BHCs should project non-interest income in light of 
stated risk scenarios and business strategies. 

BHCs should have a well-defined process in place to develop projections of revenues, 
expenses, losses, on- and off-balance sheet items, and risk-weighted assets in an enterprise- 
wide scenario analysis. Projections should be based on sound underlying assumptions, 
interactions, and factors (main drivers of change), and the estimates should be scrutinized, 
documented, and reported. 
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Concept Checkers 



1 . The seven principles of an effective capital adequacy process for bank holding 
companies (BHCs) subject to the Capital Plan Rule include which of the following? 

L Oversight from peer BHCs 

II. Annual reporting to the stock exchange (where their stock is listed) 

A. I only 

B. II only. 

C. Both I and II. 

D. Neither I nor II. 

2. The Federal Reserve’s Capital Plan Rule requires BHCs to maintain an effective 
process for assessing their capital adequacy for: 

A. BHCs, U.S. or non-U.S. domiciled. 

B. BHCs with more than five years of operational history. 

C. BHCs with a net annual income of more than $5 billion. 

D. BHCs with total consolidated assets of $50 billion or greater. 

3. How many of the following statements is most likely correct? BHCs should have risk 
identification processes that evaluate: 

I. On- and off-balance sheet positions. 

II. Risk transfer and/or risk mitigation techniques. 

III. Changes in institutions’ risk profile due to portfolio quality. 

IV. Reputational risk. 

A. One statement. 

B. Two statements. 

C. Three statements. 

D. Four statements. 

4. Which of the following statements is most likely correct? 

A. The internal controls policy of BHCs requires that senior management should 
furnish the board of directors with sufficient information to comprehend the 
BHC risk exposures. 

B. A governance policy offers fundamental guidelines and principles to BHCs for 
the capital issuance, use, distribution, and planning purposes. 

C. Suspension or reduction in dividends or repurchase programs do not fall under 
the capital policy of BHCs. 

D. Designing and testing a scenario-related default of a major counterparty is an 
example of BHC stress testing and a stress scenario design policy. 

5. Which of the following statements is most likely correct? 

I. Under the expected losses methodologies, loss estimation involves three 
elements: probability of default, loss given default, and exposure at default. 

II. Net interest income projections should incorporate changing conditions for 
balance sheet positions, including embedded options, prepayment rates, loan 
performance, and re-pricing rates. 

A. I only. 

B. II only. 

C. Both I and II. 

D. Neither I nor II. 
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Concept Checker Answers 



1 . D Oversight from peer BHCs and annual reporting to the stock exchange are not included in 

the seven principles of an effective capital adequacy process. 

2. D BHCs with total consolidated assets of $50 billion or greater. The other answers are not part 

of the requirements under the Capital Plan Rule. 

3. D All of the statements are correct. BHCs should have risk identification processes effectively 

identifying all risk exposures for assessing capital needs. Reputational risk, like strategic 
risk and compliance risk, falls under the category of “other risks” and are more difficult to 
quantify. Nevertheless, there are a wide range of methods BHCs employ to evaluate other 
risks. 

4. D The first statement is the requirement of the governance policy and not the internal control 

policy. The second statement falls under capital policy and not the governance policy. 
Regarding the third statement, capital contingency plans (e.g., suspension or reduction in 
dividends or repurchase programs) are a key part of capital policies of BHCs detailing the 
actions intended to be taken under deficiencies in capital position. The fourth statement is 
correct. Many different scenarios, including counterparty default, fall under the BHCs’ stress 
testing and scenario design policy. 

5. C Both statements are correct. Loss estimation involves probability of default, loss given 

default, and exposure at default. Net interest income projections should incorporate 
changing conditions for balance sheet positions, including embedded options, prepayment 
rates, loan performance, and re-pricing rates. 
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The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Stress Testing Banks 



Topic 53 

Exam Focus 

This topic focuses on the use of bank stress testing to determine if liquidity and capital are 
adequate. The discussion focuses primarily on capital adequacy but notes that the issues 
are similar with respect to liquidity. For the exam, understand the details of the 2009 
Supervisory Capital Assessment Program (SCAP), the first stress testing required after the 
2007—2009 financial crisis. Also, be able to explain the issue of coherence in stress testing 
and describe the challenges with modeling the balance sheet using stress tests in the context 
of the stress test horizon. Finally, understand the differences in disclosure between U.S. and 
European stress tests and the way that stress test methodologies and disclosure have changed 
since the 2009 SCAP. 



Stress Testing 

In the wake of the 2007—2009 financial crisis, regulators and other policymakers realized 
that standard approaches to risk assessment, such as regulatory capital ratio requirements, 
were not sufficient. At that point, supervisory stress testing became a popular tool for 
measuring bank risk. There was a “pop-quiz” quality to the post-financial crisis stress tests. 
They were difficult to manipulate because they were sprung on banks at short notice. As a 
result, the information provided by the stress tests to regulators and the market was truly 
new. This allowed financial markets to better understand ha n k risks and, as a result, regain a 
level of trust in the banking sector. 

The goal of stress testing, as well as capital/liquidity and “economic capital/liquidity” 

(i.e., internal, bank-specific) models, is to assess how much capital and liquidity a financial 
institution needs to support its business (i.e., risk taking) activities. It is relatively easy for 
banks to swap out of lower risk assets and into higher risk assets. Stress testing provides 
clarity about the true risk and soundness of banks. 

Stress testing is an old tool that banks and other firms have used to examine risk. It asks 
the question “what is the institution’s resilience to deteriorating conditions?” and simulates 
financial results given various adverse scenarios. Stresses are generally of two basic types: 
scenarios or sensitivities. An example of a scenario is a severe recession. An example 
of sensitivity is a significant increase in interest rates. Risk managers can stress test the 
sensitivity of a single position or loan or an entire portfolio. 



©2015 Kaplan, Inc. 



Page 205 



Topic 53 

Cross Reference to GARP Assigned Reading — Schuermann 



Supervisory Capital Assessment Program (SCAP) 



LO 53.1: Compare and contrast the features and scope of stress tests before and 
after the Supervisory Capital Assessment Program (SCAP). 



In the wake of the financial crisis, there was much uncertainty about the soundness of 
the U.S. banking system. Regulators needed to assess the capital strength of financial 
institutions. If there was a gap between what a bank needed in terms of capital and what it 
had, regulators had to find a credible way to “fill the hole.” The 2009 U.S. bank stress test, 
kn own as the Supervisory Capital Assessment Program (SCAP), was meant to serve that 
purpose. It was the first macro-prudential stress test after the 2007—2009 financial crisis. 
Macro-prudential regulation focuses on the soundness of the banking system as a whole 
(i.e., focuses on systematic risks) while micro-prudential regulation focuses on the safety 
and soundness of the individual institution. 

At this point the Federal government planned to infuse equity capital into banks that 
were undercapitalized based on stress testing. The Treasury intended to borrow money 
and “downstream” it as equity in banks via the Treasury’s Capital Assistance Program 
(CAP). If banks could not convince investors to fill the hole (i.e., infuse hanks with needed 
equity capital), current investors would be diluted by the government’s equity investment. 
In the end, 19 SCAP banks were required to raise $75 billion withi n six months. The 
undercapitalized banks raised $77 billion of Tier 1 common equity and did not need to 
draw on the CAP funds. 

Prior to 2009, stress testing was relatively simple. Figure 1 summarizes the differences in 
stress testing pre-SCAP and post-SCAP. 



Figure 1: Comparison of Stress Testing Pre-SCAP and Post-SCAP 



Pre-SCAP 


Post-SCAP 


Primarily assessed exposure to single-shocks 
(e.g., volatility increases OR interest rate 
increases OR increasing unemployment). 


Considers broad macro-scenarios and market-wide 
stresses with multiple factors occurring/ changing at 
once, as evidenced in the 2007—2009 financial crisis. 


Focused on specific bank products or 
business units (e.g., lending or trust). 


Focuses on the whole firm, a more comprehensive 
look at the effect of the stress scenarios on the 
institution. 


Typically focused on earnings shocks 
(i.e., losses) but not on capital adequacy. 


Explicitly focuses on capital adequacy. Considers the 
post-stress common equity threshold to ensure that 
a bank remains viable. 


Focused exclusively on losses. 


Focuses on revenues, costs, and projected losses. 


Stress testing was static in nature. 


Stress testing is now dynamic and path dependent. 
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LO 53.2: Explain challenges in designing stress test scenarios, including the 
problem of coherence in modeling risk factors. 



One of the challenges of designing useful stress tests is coherence. The sensitivities and 
scenarios must be extreme but must also be reasonable or possible (i.e., coherent). Problems 
are inherently multi-factored, making it more difficult to design a coherent stress test. For 
example, an increase in volatility can lead to credit markets freezing. High unemployment 
and falling equity prices often go hand-in-hand. It is not sufficient to specify one potential 
problem (i.e., risk factor) because the others do not remain fixed. The supervisors key 
challenge is to specify the joint outcomes of all relevant risk factors. 

Additionally, not everything goes bad at once. For example, if some currencies are 
depreciating, others must be appreciating. If there is a “flight to quality,” there must also 
be safe haven assets in the stress model. So while it is important to look at, for example, 
what happens if U.S. Treasury debt becomes riskier and is no longer a safe haven, the model 
would at the same time have to identify the “risk-free” asset(s) in which capital would flee 
under those circumstances. 

The problem is even greater when designing stress scenarios for marked-to-market 
portfolios of traded securities and derivatives. Risk is generally managed with a value at risk 
(VaR) system. Hundreds of thousands of positions in the trading book must be mapped to 
thousands of risk factors, tracked on a daily basis. The data that results is used to estimate 
volatility and correlation parameters. It is very difficult to find coherent outcomes in such a 
complex, multi-dimensional universe. 

The 2009 SCAP tested rather simple scenarios with three variables: growth in GDP, 
unemployment, and the house price index (HPI). Historical experience was used for the 
market risk scenario (i.e., the financial crisis — a period of “flight to safety,” the failure of 
Lehman, and higher risk premia). While the market risk scenario did not test for something 
new, the overall framework achieved coherence of financial and other stresses of the time 
period. 

One thing to note is that prior to 201 1 all supervisory stress tests imposed the same 
scenarios on all banks (i.e., a one-size-fits-all approach to stress testing). In recognition of 
the problem, the 2011 and 2012 Comprehensive Capital Analysis and Review (CCAR) 
asked banks to submit results from their own stress scenarios in addition to the supervisory 
stress scenario in an attempt to reveal bank-specific vulnerabilities. This was an important 
step forward from the 2009 SCAP as it gave supervisors a sense of what banks think are 
the high risk scenarios. This provides regulators with not only bank-specific (i.e., micro- 
prudential) insight but also improves macro-prudential supervision as it highlights common 
risks across banks that may have been underemphasized or unnoticed before. 
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Challenges in Modeling Losses 



LO 53-3: Describe the challenges in modeling losses under adverse market 
conditions, including the mapping of macroeconomic risk factors to specific 
intermediate risk factors. 



Current stress tests are based on macro-scenarios (e.g., unemployment, GDP growth, the 
HPI). One concern is how to translate the macro-risk factors employed in stress testing 
into micro (i.e., bank-specific) outcomes related to revenues and losses. Supervisors need to 
map from macro-factors into intermediate risk factors that drive losses in specific products 
and geographic areas. Although not limited to these products, geographic differences are 
especially important in modeling losses in both commercial and residential real estate 
lending. 

Credit card losses are particularly sensitive to unemployment figures. For example, 
unemployment was 12.9% in Nevada in July 2011, 3.3% in North Dakota, and the 
national unemployment rate was 9. 1 %. Credit card loss rates varied dramatically from 
region to region during this period. The geographic diversity with respect to macro- factors 
makes a “one-size-fits-all” stress testing regime less meaningful. 

Geography is not the only difference supervisors must contend with. Risks affect different 
asset classes in different ways. For example, during recessions people buy fewer automobiles 
overall. However, if a person needs a car during a recession, he is more likely to buy a used 
car. Thus, if default rates increase, loss given default (LGD) (i.e., loss severity) may not 
increase as much. 

The business cycle also affects different industries at different times. Consider the airline 
industry versus the healthcare industry during a recession. Airplanes are collateral for loans 
to airlines. If the airline industry is depressed, the bank gets stuck with collateral that is very 
difficult to sell except at extremely depressed prices. Healthcare is somewhat recession-proof 
but that doesn’t mean the bank can transform an airplane it is stuck with into a hospital. 
These factors increase the difficulty of mapping broader macro-factors to bank-specific stress 
results. 



Challenges in Modeling the Balance Sheet 



LO 53.4: Explain the challenges in modeling a banks balance sheet over a stress 
test horizon period. 



The typical stress test horizon is two years. Over this period, both the income statement 
and balance sheet must be modeled to determine if capital is adequate post-stress. Generally 
speaking, capital is measured as a ratio of capital to assets. There are different types of 
capital (e.g., Tier 1 and Tier 2) but in general (and for the sake of simplicity), capital can be 
defined as common equity. Risk-weighted assets (RWA) are computed based on the Basel II 
risk weight definitions. For example, agency securities have a lower risk weight than credit 
card loans. 
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In a stress model, the beginning balance sheet generates the first quarter’s income and loss 
from the stressed scenario, which in turn determines the quarter-end balance sheet. At that 
point, the person modeling the risk must consider if any assets will be sold or originated, 
if capital is depleted due to other actions such as acquisitions or conserved as the result of 
a spin-off, if there are changes made to dividend payments, if shares will be repurchased or 
issued (e.g., employee stock or stock option programs), and so on. These decisions make 
modeling the balance sheet over the stress horizon quite difficult. The stress model doesn’t 
determine if it would be a good time to sell a subsidiary or lower dividend payments. 

The challenges of balance sheet modeling exist under both static and dynamic modeling 
assumptions. The bank must maintain its capital (and liquidity) ratios during all quarters of 
the stress test horizon. At the end of the stress horizon the bank must estimate the reserves 
needed to cover losses on loans and leases for the next year. This means that a two-year 
horizon stress test is actually a three year stress test (i.e., a T-year stress test requires the bank 
to estimate required reserves to cover losses for T+l years). 



Stress Test Comparisons 



LO 53.5: Compare and contrast the 2009 SCAP stress test, the 2011 and 
2012 CCAR, and the 2011 EBA Irish and EBA European stress tests in their 
methodologies and key findings. 



Disclosure was a significant feature of the 2009 SCAP. It disclosed projected losses for each 
of the 19 participating ha n ks for eight asset classes. It also disclosed resources the bank 
had to absorb losses other than capital (e.g., pre -provision net revenue and reserve releases 
if available). This high level of disclosure created transparency. It allowed investors and 
the market to check the severity of stress tests and to comprehend stress test outcomes at 
the individual bank level. Before the 2009 SCAP, banks only reported realized losses, not 
forecasted losses (i.e., possible losses given the stress scenario). 

The 2011 CCAR required only that macro-scenario results be published, not bank level 
results. This differed dramatically from the 2009 SCAP requirements. The market had to 
figure out whether a bank had passed the test or not (i.e., market participants had to “do 
the math” themselves). For example, if a bank increased its dividend, it was assumed by the 
market to have “passed” the stress test. However, the 2012 CCAR disclosed virtually the 
same amount and detail of bank level stress data as the 2009 SCAP (i.e., bank level loss rates 
and losses by major asset classes). The regulatory asset classes are: 

1 . First and second lien mortgages. 

2. Commercial and industrial (C&I) loans. 

3. Commercial real estate loans. 

4. Credit card lending. 

5. Other consumer loans. 

6. Other loans. 
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One of the key contributions of the CCAR was that in both 2011 and 2012 the CCAR 
required banks to submit the results of their own scenarios, both baseline and stress, not 
just supervisory stress test results. The Fed also reported dollar pre -provision net revenue 
(PPNR), gains and losses on available-for-sale and held-to-maturity securities, and trading 
and counterparty losses for the six institutions with the largest trading portfolios. These 
firms were required to conduct the trading book stress test. The numbers that were reported 
were supervisory estimates, not bank estimates, of losses under the stress scenario. 

In contrast, the 2011 European Banking Authority (EBA) Irish and 2011 EBA European- 
wide stress tests, both disclosed after the CCAR, contained considerable detail. In the Irish 
case, the report contained a comparison of bank and third party estimates of losses. The 
EBA data was available in electronic, downloadable form. Ireland needed credibility, having 
passed the Committee of European Bank Supervisors (CEBS) stress test in July 2010 only 
to need considerable aid four months later. In general, the faith in European supervisors was 
harmed and only by disclosing detailed information on bank-by-bank, asset-class, country, 
and maturity bucket basis could the market interpret the data and draw its own conclusions 
about individual bank risks. Figure 2 summarizes the differences among the various stress 
test regimes. 
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Stress Test 


Methodologies 


Disclosure 


Findings 


SCAP (2009). All 
banks with $100 
billion or more in 
assets as of 2008 
year end were 
included. 


Tested simple scenarios with 
three dimensions, GDP 
growth, unemployment, 
and the house price index 
(HPI). Historical experience 
was used for the market risk 
scenario (i.e., the financial 
crisis — a period of “flight 
to safety,” the failure of 
Lehman, and higher risk 
premia). A “one-size-fits-all” 
approach. 


First to provide 
bank level projected 
losses and asset/ 
product level loss 
rates. 


19 SCAP banks were 
required to raise 
$75 billion within 
six months. The 
undercapitalized 
banks actually raised 
$77 billion of Tier 1 
common equity and 
none of the banks 
were forced to use 
the Treasury’s Capital 
Assistance Program 
funds. 


CCAR (2011) 


In recognition of “one-size- 
fits-all” stress testing, CCAR 
asked banks to submit 
results from their own 
baseline and stress scenarios. 


Only macro- 
scenario results 
were published. 




CCAR (2012) 


Banks were again asked to 
submit their own baseline 
and stress test results. 


Similar in detail to 
SCAP 2009— bank 
level and asset/ 
product level loss 
rates disclosed. 




EBA Irish (2011) 


Similar in design to EBA 
Europe 2011. 


Comparison of 
bank and third 
party projected 
losses; comparison 
of exposures by 
asset class and 
geography. Data 
is electronic and 
downloadable. 


After passing the 
2010 stress tests, 2011 
stress tests revealed 
Irish banks needed 
€24 billion. Greater 
disclosure in 20 1 1 
resulted in tightening 
credit spreads on 
Irish sovereign and 
individual bank debt. 


EBA Europe 
(2011). [formerly 
the Committee of 
European Bank 
Supervisors (CEBS)] 
90 European banks 
were stress tested. 


Specified eight macro-factors 
(GDP growth, inflation, 
unemployment, commercial 
and residential real estate 
price indices, short and 
long-term government rates, 
and stock prices) for each 
of 21 countries. Specified 
over 70 risk factors for 
the trading book. It also 
imposed sovereign haircuts 
across seven maturity 
buckets. 


Bank level 
projected losses. 
Comparisons of 
exposures by asset 
class and geography. 
Data is electronic 
and downloadable. 


Eight banks were 
required to raise €2.5 
billion. 
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The key benefit of greater disclosure is transparency. Transparency is especially important 
in times of financial distress. However, during “normal” times, the costs of disclosure may 
outweigh the benefits. For example, banks may “window dress” portfolios, making poor 
long-term investment decisions to increase the likelihood of passing the test. Traders may 
place too much weight on the public information included in stress test disclosure and be 
disincentivized to produce private information about financial institutions. This harms 
the information content of market prices and makes prices less useful to regulators making 
policy decisions. 

One thing to note is that prior to the CCAR 2011 requirements, all supervisory stress tests 
imposed the same scenarios on all banks (i.e., a one-size-fits-all approach to stress testing). 
In recognition of the problem, the 2011 and 2012 CCAR asked banks to submit results 
from their own scenarios in addition to the supervisory stress scenario in an attempt to 
reveal bank-specific vulnerabilities. 
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Key Concepts 



LO 53.1 

After the 2007—2009 financial crisis, it was clear that traditional risk measures such as 
regulatory capital ratios were insufficient. Supervisory stress-testing became an important 
risk-assessment tool at that point. 

The goal of stress testing is to assess how much capital and liquidity a financial institution 
needs to support its business (i.e., risk taking) activities. 

The 2009 U.S. ba n k stress test, known as the Supervisory Capital Assessment Program 
(SCAP), was the first macro-prudential stress test after the 2007—2009 financial crisis. 



LO 53.2 

One of the challenges regulators face is designing coherent stress tests. The sensitivities 
and scenarios must be extreme but must also be reasonable and possible (i.e., coherent). 
Problems are inherently multi-factor, making it more difficult to design a coherent stress 
test. 



LO 53.3 

Current stress tests are based on macro-scenarios (i.e., unemployment, GDP growth, the 
HPI). One concern is how to translate the macro-risk factors employed in stress tests into 
micro (i.e., bank specific) outcomes related to revenues and losses. Supervisors must be 
able to map from macro-factors into intermediate risk factors that drive losses in specific 
products and geographic areas. 



LO 53.4 

In a stress model, the starting balance sheet generates the first quarter’s income and loss 
from the stressed scenario, which in turn determines the quarter-end balance sheet. The 
bank must maintain its capital (and liquidity) ratios during all quarters of the stress test 
horizon, typically two years. 



LO 53.5 

Disclosure was a significant feature of the 2009 SCAP. This high level of disclosure lead to 
transparency and allowed investors and the market the ability to check the severity of the 
stress tests and the outcomes of the stress at the individual bank level. 

In 20 1 1 , CCAR required only macro-scenario results be published, not bank level results, 
differing significantly from the 2009 SCAP requirements. The 2012 CCAR disclosed 
virtually the same amount and detail of bank level stress data as the 2009 SCAP. The EBA 
Irish and the EBA Europe required significant disclosures as well. The disclosures were 
needed to increase trust in the European banking system. 
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Concept Checkers 



1. Which of the following changes in stress testing was not the result of the 2009 
Supervisory Capital Assessment Program (SCAP)? 

A. Banks are now required to provide the results of their own scenario stress tests. 

B. Stress scenarios are now broader in nature. 

C. Stress testing now focuses on the whole firm. 

D. Stress testing now focuses on revenues, costs, and losses. 

2. Piper Hook, a bank examiner, is trying to make sense of stress tests done by one of 
the banks she examines. The stress tests are multi-factored and complex. The bank 
is using multiple extreme scenarios to test capital adequacy, making it difficult for 
Hook to interpret the results. One of the key stress test design challenges that Hook 
must deal with in her examination of stress tests is: 

A. multiplicity. 

B. efficiency. 

C. coherence. 

D. efficacy. 

3. Greg Nugent, a regulator with the Office of the Comptroller of the Currency, 
is presenting research on stress tests to a group of regulators. He is explaining 
that macro-variable stress testing can be misleading for some banks because of 
geographical differences in macro risk factors. He gives the example of the wide 
range of unemployment rates across the U.S. following the 2007—2009 financial 
crisis. Which type of loan did Nugent most likely identify as having losses tied to 
unemployment rates? 

A. Residential real estate loans. 

B. Credit card loans. 

C. Commercial real estate loans. 

D. Industrial term loans. 

4. A risk modeler has to make assumptions about acquisitions and spinoffs, if dividend 
payments will change, and if the bank will buy back stock or issue stock options to 
employees. These factors make it especially challenging to: 

A. get a CAMELS rating of 2 or better. 

B. determine if the bank has enough liquidity to meet its obligations. 

C. meet the Tier 1 equity capital to risk-weighted assets ratio. 

D. model a banks balance sheet over a stress test horizon. 

5. One of the key differences between the 2011 CCAR stress test and the 201 1 EBA 
Irish stress test is that: 

A. the CCAR did not require banks to provide results from their own stress 
scenarios. 

B. the EBA Irish did not find any banks in violation of capital adequacy 
requirements. 

C. the CCAR required disclosure of macro-level, not bank level, scenario results. 

D. the EBA Irish allowed for 1-year stress horizons. 
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Concept Checker Answers 



1. A The 2009 U.S. bank stress test, known as the Supervisory Capital Assessment Program 

(SCAP), was the first macro-prudential stress test after the 2007—2009 financial crisis. 

The 2011 CCAR, not the 2009 SCAP, required that banks provide results of their own s tress 
scenarios along with supervisory stress scenarios. 

2. C One of the challenges of designing useful stress tests is coherence. The sensitivities and 

scenarios must be extreme but must also be reasonable or possible (i.e., coherent). Problems 
are inherently multi-factored, making it more difficult to design a coherent stress test. Hook 
is dealing with the possibly incoherent results of the bank’s stress tests. 

3. B Credit card losses are particularly sensitive to unemployment figures. For example, 

unemployment was 12.9% in Nevada in July 2011, 3.3% in North Dakota, and the national 
unemployment rate was 9.1%. Credit card loss rates varied dramatically from region to 
region during this period. Residential mortgages are affected by unemployment as well but 
people are generally more likely to quit paying credit card bills before mortgages. 

4. D In a stress model, the starting balance sheet generates the first quarter’s income and loss from 

the stressed scenario, which in turn determines the quarter-end balance sheet. At that point 
the person modeling the risk must consider if any assets will be sold or originated, if capital 
is depleted due to other actions such as acquisitions or conserved as the result of a spin- 
off, if there are changes made to dividend payments, if shares will be repurchased or issued 
(e.g., employee stock or stock option programs), and so on. This makes it challenging to 
model the balance sheet over the stress horizon. 

5. C The 2011 CCAR required banks to provide results from their own stress scenarios but the 

EBA Irish did not. After the 2011 EBA Irish tests, €24 billion was required to increase the 
capital of several banks. The 2011 CCAR, unlike the SCAP and the 2012 CCAR, only 
required the disclosure of macro-level scenario results. The EBA Irish did not change the 
stress horizon from two years to one year. 
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Understanding the key failure mechanics for dealer banks is crucial for mitigating liquidity 
and solvency risks. Liquidity risks are accelerated when counterparties or prime broker clients 
question the solvency of a large dealer bank and, in turn, limit their exposure. This results 
in increased liquidity risk and insolvency risk for the bank and increased systemic liquidity 
risk for the financial markets in which dealer banks play commingled roles. Dealer banks 
play key roles as prime brokers, securities underwriters, special purpose entities (SPE), and as 
counterparties in the over-the-counter (OTC) derivatives and repo markets. Diseconomies 
of scope in risk management and corporate governance were revealed by the recent market 
crisis. Thus, new policies to alleviate dealer bank risks were implemented to address off- 
balance sheet risks, capital requirements, leverage, liquidity risks, clearing banks, and adverse 
selection effects in “toxic” asset markets. 



Functions of Dealer Banks 



LO 54.1: Describe the major lines of business in which dealer banks operate and 
the risk factors they face in each line of business. 



Large dealer banks provide a variety of intermediary functions in the markets for over-the- 
counter (OTC) derivatives, repurchase agreements, and securities. In addition, large dealer 
banks act as a prime broker for hedge funds and provide asset management for wealthy 
individuals and institutions. 

Large dealer banks play an important function in the OTC derivatives market. Dealer 
banks transfer the risk of the derivatives positions requested by counterparties by creating 
new derivatives contracts with other counterparties. Examples of types of OTC derivatives 
are interest rate swaps, collateralized debt obligations (CDOs), collateralized mortgage 
obligations (CMOs), and credit default swaps (CDSs). 

Counterparty risk in the OTC market refers to the risk that one or more of the 
counterparties will default on their contractual obligations. The total amount of wealth 
does not change as derivatives tra n sfer wealth from one counterparty to another as 
contingencies are realized over time. However, if a counterparty incurs large losses, their 
derivatives contracts incur frictional bankruptcy costs that result in distress costs for their 
counterparties. Dealer banks are often counterparties to other dealer banks and large market 
players. Therefore, the solvency and liquidity problems of one large dealer bank can quickly 
result in increased systemic risk and a potential liquidity crisis. 
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If the dealer bank does not have the liquidity to function, they will become insolvent. The 
failure of a large dealer bank would result in increased systemic risk for the OTC market. 
When counterparties question the solvency of a dealer bank, they will take actions to reduce 
their exposure and exit their positions. For example, the default of Lehman Brothers in 
September of 2008 not only disrupted the OTC derivatives markets, but the repercussions 
were also felt by other financial markets and institutions. 

Another important function of large dealer banks is in the short-term repurchase or repo 
market. Large dealer banks finance significant fractions of another dealer banks assets 
through repos. Prior to the recent crisis, dealer banks used overnight repos to finance 
holdings of agency securities, corporate bonds. Treasuries, mortgages, and collateralized debt 
obligations (CD Os) with little incremental capital. Some large dealer banks had very high 
leverage due to the lack of capital requirements for these repos. The high leverage caused 
significant solvency risk when the use of subprime mortgages as collateral was questioned. 

The systemic and firm specific risk is significantly increased if a repo counterparty questions 
the solvency of a dealer bank. Counterparties are unlikely to renew repos, and the repo 
creditors may be legally required to sell collateral immediately. Without a government or 
central bank stepping in as a lender of last resort, dealer banks have no place to turn when 
repos are not renewed. As many dealer banks act as counterparties for other positions, the 
solvency of one dealer bank is likely to have a ripple effect and greatly increase the systemic 
risk of these markets. 

Dealer banks provide investment banking functions through the management and 
underwriting of securities issuances. These investment banking functions also include 
advising corporations regarding mergers and acquisitions and merchant banking functions, 
such as the buying and selling of oil, metals, and other commodities. These functions 
provide an important source of revenue for dealer banks. An additional strain on liquidity is 
caused by the lack of cash inflows when issuers question the solvency of the dealer bank and 
take their business elsewhere. This can lead to systemic risk as new issues and the liquidity 
of existing issues are halted, as few institutions are able or willing to fill the void when a 
large dealer banks solvency or liquidity are questioned. 

Large dealer banks act as a prime broker to large investors such as hedge funds. In this 
context, the services provided by the dealer banks include custody of securities, clearing, 
securities lending, cash management, and reporting. When the solvency of a prime broker is 
questionable, a hedge fund could demand cash margin loans from the dealer that are backed 
by securities. The prime broker may not be able to use those same securities as collateral 
with other lenders who may also question their solvency. Thus, the dealer bank’s liquidity 
position is weakened if large clients reduce their exposure by exiting their positions or 
entering new positions to offset their risk. 

In addition, if prime broker clients leave, then their cash and securities are no longer in the 
pool of funds to meet the dealer bank’s liquidity needs for other clients. A systemic shortage 
of collateral and a liquidity crisis can result from the reduction of collateral securities caused 
by the flight of prime brokerage clients. Systemic risk is even greater when hedge funds do 
not mitigate their exposure through diversification. Prior to the recent financial crisis, hedge 
funds had significant positions with only a few dealer banks. 
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Dealer banks also provide an important function as a counterparty for derivatives for 
brokerage clients. Dealer banks sometimes operate “internal hedge funds” and private equity 
partnerships. Off-balance sheet entity functions such as internal hedge funds, structured 
investment vehicles, and money market funds can have substantial losses. The dealer banks 
have an incentive to voluntarily support these entities to protect their reputation and 
franchise value. When a dealer bank shows signs of distress, counterparties and others may 
begin to exit their relationships, which severely increases the dealer banks liquidity risk. 

In addition, large dealer banks provide traditional commercial banking functions, such 
as gathering deposits for corporate and consumer lending. The risks for a dealer bank are 
similar to a traditional bank with respect to these functions. However, prior to the recent 
financial crisis, dealer banks did not have access to the discount window (borrowing money 
from the central bank), and their accounts were not federally insured. For these reasons, 
a run on the bank’s deposits was more likely to lead to a liquidity crisis. With increased 
concerns of the solvency of large dealer banks, the availability of credit across the industry 
was threatened. This had the potential to lead to severe market slowdowns if borrowers were 
unable to obtain credit. 



Dealer Bank Markets 

Large dealer banks operate in markets that are outside the scope of traditional bank-failure 
resolution mechanisms, such as conservatorship or receivership. The dealer banks are 
organized under the umbrella of holding companies in order to provide the wide variety of 
commercial banking, merchant banking, investment banking, brokerage, and off-balance 
sheet partnership activities. In addition, dealer banks often have large asset-management 
divisions that provide custody of securities, cash management, brokerage, and alternative 
investments vehicles. Dealer banks are also typically the general partner with limited partner 
clients. 

In the primary securities market, dealer banks are the security underwriter. They buy equity 
and bond securities from issuers and sell them to institutions and investors over a period of 
time. Dealer banks also play a major role in the secondary securities market in providing 
liquidity to the market. They are the primary intermediary in the OTC securities markets 
by assisting in the private negotiation between investors and corporations, municipalities, 
certain national governments, and securitized credit products. Dealer banks are also actively 
involved in publicly traded equity markets by acting as brokers, custodians, securities 
lenders, and facilitating large block trades. 

A major market in which dealer banks operate is the repurchase agreements, or repos, 
market. Repos are short-term cash loans collateral i zed by securities. In the repo market, one 
counterparty borrows cash from another counterparty. The majority of repos are for a very 
short period of time, such as overnight. The loans are collateralized by government bonds, 
corporate bonds, mortgages, agency securities, or other securities such as CDOs. In order to 
reduce counterparty risk, a clearing bank often acts as a third party and holds the collateral. 
The clearing bank facilitates the trade and somewhat reduces the risk of default for the 
lender. It is common for counterparties to renew these positions on a continuous basis as 
long as the solvency of the dealer bank is not questioned. It is not uncommon for these 
counterparties to be another dealer bank. 
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Dealer banks are usually counterparties in the OTC derivatives market. The most 
prominent OTC derivatives are interest rate swaps where variable rate commitments often 
linked to the London Interbank Offering Rate (LIBOR) are exchanged for a fixed rate 
for a specific time period. Dealer banks typically perform what is known as a “matched 
book” dealer operation. They transfer the risk of the derivatives positions requested by 
counterparties by creating new derivatives contracts with other counterparties, who are 
oftentimes other dealer banks. Thus, dealer banks have large OTC derivatives exposures 
with other dealer banks. In addition to dealing with interest rate swaps, dealers are often 
counterparties in CDSs. In these contracts, the dealer bank transfers the default risk rather 
than the interest rate risk for the counterparties involved in the contracts. 

Some large dealer banks are very active in off-balance sheet financing. In these markets, a 
bank can sell residential mortgages or other loans to a special purpose entity (SPE). The 
SPE compensates the sponsoring bank for the assets with the proceeds of debt that it issues 
to third-party investors or hedge funds. The SPE pays for the principal and interest of the 
debt issued with the cash flows from the mortgages or other assets that were purchased from 
the sponsoring bank. Thus, the SPE holds the collateralized pool of assets and provides 
an innovative product for hedge funds and other investors to purchase. These SPEs also 
provide a means for financial institutions to diversify their exposure by transferring risk to 
other investors who are either in or outside the financial industry. 

For example, prior to the recent financial crisis, dealer banks were actively participating 
as sponsor banks for structured investment vehicles (SIVs), which are a form of a special 
purpose entity. The SIV fina n ces residential mortgages or other debt obligations with short- 
term debt sold to other investors in the form of CD Os and CMOs. 

Before the recent crisis, banks were not required to include the off-balance sheet assets and 
debt obligations in minimum capital requirement and accounting reports. Thus, some 
dealer banks became highly leveraged as they were allowed to operate much larger loan 
purchases and origination businesses with a limited amount of capital. The fall in residential 
housing values in the summer of 2007 led to the rise of mortgage defaults, which threatened 
the ability of the SIV to make payments. As short-term creditors became concerned 
with the solvency of the SIVs, they refused to renew loans, and this created a liquidity 
and solvency issue for SIVs. Dealer banks had to provide support to SIVs to protect its 
reputation and franchise value. 



Diseconomies of Scope 

As mentioned, dealer h an ks act as holding companies in order to provide a wide variety 
of commercial banking, prime brokerage, investment banking, asset management, and 
off-balance sheet activities. The recent financial crisis caused many to question the ability 
of dealer banks to manage risks properly. It is sometimes argued that forming large bank 
holding companies results in economies of scope with respect to information technology, 
marketing, and financial innovation. However, the recent financial crisis clearly identified 
diseconomies of scope in risk management and corporate governance. The executive 
management and board of directors did not fully understand or control the risk taking 
activities within their organizations. 

For example, prior to their insolvency. Bear Stearns and Lehman relied heavily on overnight 
repos with leverage ratios above 30. These dealer han k s held these assets on their balance 
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sheets with little incremental capital. Management did not properly manage the amount of 
off-balance sheet risk the bank was exposed to. Thus, the over-leveraged positions made it 
impossible to overcome the liquidity and solvency issues that quickly arose when the values 
of the ba n ks assets were questioned. Increased awareness or more appropriate risk models 
may have prevented the insolvency of these dealer banks. 



Liquidity Concerns for Dealer Banks 



LO 54.2: Identify situations that can cause a liquidity crisis at a dealer bank and 
explain responses that can mitigate these risks. 



A liquidity crisis for a dealer bank is accelerated if counterparties try to reduce their 
exposure by restructuring existing OTC derivatives with the dealer or by requesting a 
novation (as discussed in the following). The flight of repo creditors and prime brokerage 
clients can also accelerate a liquidity crisis. Lastly, the loss of cash settlement privileges is the 
final collapse of a dealer banks liquidity. 

As mentioned previously, when OTC derivatives counterparties question the solvency of a 
dealer bank, they will begin to reduce their exposures to the dealer. A counterparty could 
reduce their exposure by borrowing from the dealer or by entering into new offsetting 
derivatives contracts with the dealer. A counterparty may also request to have in-the-money 
options revised to at-the-money strike prices and, thus, reduce their exposure to the dealer 
by receiving cash from the option position. 

Another means that a counterparty has of reducing their exposure to a dealer is through a 
novation to another dealer. For example, a hedge fund may use a credit default swap from 
a dealer to protect themselves from a loss on a borrower. If the hedge fund was concerned 
about the solvency of the dealer bank, they could request a novation from another dealer 
bank to protect themselves from default arising from the original dealer bank. Although 
these novations are often granted by dealer banks, in the case of Bear Stearns, the request 
was denied, which raised additional concerns regarding the solvency of Bear Stearns. In 
addition to decreasing the reputation capital and franchise value of this dealer bank, the 
liquidity position was also under increased stress. A novation could result in the removal 
of the cash collateral of the original dealer bank and transfer of this collateral to the second 
dealer bank. 

Central clearing mitigates the liquidity risk caused by derivatives counterparties exiting 
their large dealer bank exposures. OTC derivatives are novated or “cleared” to a central 
clearing counterparty that stands between the original counterparties. The use of a central 
clearing counterparty also mitigates the systemic risk of financial markets and institutions 
when the solvency of a large dealer bank is questioned. However, the use of central clearing 
counterparties is only effective with derivatives that contain relatively standard terms. 

Thus, this was not an effective means of dealing with the infamous customized AIG credit 
derivatives. 

Further liquidity pressure can arise if derivative counterparties desire to reduce their 
exposure by entering new contracts that require the dealer h ank to pay out cash. For 
example, a dealer bank may try to signal their strength to the market by quoting 
competitive bid-ask spreads on an OTC option. If the bid price is then accepted, the dealer 
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must settle with a cash payment to the counterparty which reduces their liquidity. If the 
dealer refuses to quote competitive bid prices, it may further signal their liquidity concerns 
to the market. 

Money market funds, securities lenders, and other dealer banks finance significant 
fractions of a dealer bank’s assets through short-term repurchase agreements. As mentioned 
previously, if the repo counterparty questions the solvency of a dealer bank, they are 
unlikely to renew repos. In this event, the repo creditors may have an incentive, or be 
legally required, to sell the collateral immediately. If the sale of the collateral is less than the 
cash position, then the dealer counterparty may face litigation for the improper disposal of 
assets. Without a government or central bank stepping in as a lender of last resort, dealer 
banks have no place to turn when repos are not renewed. They could reinvest their cash in 
new repos, but other counterparties are unlikely to take these positions if the dealer banks 
solvency is questioned. 

The dealer h an k can mitigate the liquidity risk caused by a run of short-term creditors 
by establishing lines of bank credit, holding cash and liquid securities, and by laddering 
the maturities of its liabilities. When a dealer bank ladders its liabilities, the maturities 
are spread out over time so that only a small fraction of its debt needs to be refinanced 
overnight. In 2008, the New York Federal Reserve Bank created the Primary Dealer Credit 
Facility to finance securities of investment banks. Immediately following the failure of 
Lehman, the remaining two dealer banks, Morgan Stanley and Goldman Sachs, became 
regulated bank holding companies. As a bank holding company, the firms gained access to 
the discount window and could turn to the government for financial support, including 
FDIC deposit insurance and loan guarantees. 

Prime brokerage accounts are a source of cash inflows for large dealer banks. In normal 
circumstances, the cash and securities of prime brokerage clients are a source of liquidity 
for the bank. In the United Kingdom, assets from client prime brokerage accounts are 
commingled with the bank’s own assets. However, in the United States, dealer banks are 
allowed to pool the money together into a separate account from the bank’s own funds. 

Thus, the prime broker is able to use the cash from one client to help meet the liquidity 
needs of another client. 

As mentioned previously, when the solvency of a prime broker is questionable, a hedge fund 
could demand cash margin loans from the dealer that are backed by the securities held in 
their account with the prime broker. The prime broker may not be able to use those same 
securities as collateral with other lenders who may question their solvency. Lenders may 
not find any incentive to lend to the questionable dealer bank. Thus, even without a run by 
prime brokerage accounts, considerable strain could be placed on the dealer bank’s liquidity 
position. 

In addition, if prime broker clients do leave on short notice, then their cash and securities 
are no longer in the pool of funds to meet the needs of other clients. In this case, the dealer 
bank must use its own cash to meet liquidity needs. The reduction of collateral securities 
caused by the flight of prime brokerage clients can lead to a systemic shortage of collateral 
and a liquidity crisis. In the future, hedge funds are likely to mitigate their exposure to a few 
dealer banks by diversifying their sources of prime brokerage with custodian banks. 
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Under normal conditions, a clearing bank may extend daylight overdraft privileges to 
clearing customers who are creditworthy. However, when the solvency of a dealer bank 
is questioned, the clearing bank may refuse to process transactions that are insufficiently 
funded by the dealer banks cash fund account. For example, in the case of Lehmans default, 
J.P. Morgan Chase was the clearing bank that invoked its “full right of offset.” Under this 
legal right, J.P. Morgan Chase was able to offset their exposures using Lehmans cash, and at 
the same time, discontinued to make cash payments during the day on Lehman transactions 
that would bring Lehmans account below zero. The failure to meet its transactions 
obligations on that day forced Lehman into bankruptcy. To mitigate this risk in the future, 
“emergency banks” are proposed to act as either a clearing bank or a trLparty repo “utility.” 



LO 54.3: Compare a liquidity crisis at a dealer bank to a traditional bank run. 



The basic economic principles causing a liquidity crisis, and potentially the insolvency 
of a large dealer bank, are not that different from the traditional retail bank run. Banks 
may finance illiquid assets with short-term deposits. However, an unexpected liquidity 
demand from depositors or the inability of borrowers to repay their loans may lead to 
concerns about the solvency of the bank. If the concern persists, a bank run could lead to 
liquidity problems, and the concern about the bank’s failure could end up as a self-fulfilling 
prophecy. 

While the basic economic principles of a bank run are similar for large dealer banks 
and retail banks, the institutional mechanisms and the systemic destructiveness are very 
different. For example, dealer banks play an essential role in providing liquidity in the 
OTC derivatives and securities markets. When the solvency of a dealer bank is questioned, 
counterparties of these markets and prime brokerage clients begin to reduce their exposure 
to the dealer. The OTC derivatives counterparty may reduce their exposure by borrowing 
from the dealer, entering new offsetting derivatives contracts with the dealer, or requesting 
a novation. A counterparty may also request to receive cash from options positions that are 
in-the-money by having them revised to at-the-money. Prime broker clients may remove 
collateral and cash, which results in further accelerating the liquidity crisis. The fact that 
dealer banks are often counterparties to other dealer banks increases the systemic risk in the 
financial markets where dealer banks play essential roles. 

Another area that dealer banks are very active involving liquidity is the repo markets. 
Especially in cases where the dealer banks are highly leveraged, the liquidity position 
is severely threatened when the dealer bank’s solvency is questioned and counterparties 
are unwilling to renew repo positions overnight. Thus, a dealer bank is involved in 
many functions that result in increased liquidity pressures that traditional banks are not 
exposed to. 
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LO 54.4: Describe policy measures that can alleviate firm- specific and systemic 
risks related to large dealer banks. 



The 2009 Public Private Investment Partnership (PPIP) was instituted by the U.S. Treasury 
Departments 2008 Troubled Asset Relief Program (TARP) to help dealer banks and 
the financial industry recover from the crisis at hand. One of the policy objectives was to 
mitigate the effect of adverse selection in the market for “toxic” assets, such as the CDOs 
backed by subprime mortgages. Adverse selection is the principle that buyers are only 
willing to buy the assets at a deep discount due to the information asymmetries that ex i st 
regarding the asset’s true value. A dealer bank may be forced to sell illiquid assets in order 
to meet liquidity needs. This results in additional losses due to the lack of demand for those 
assets. The PPIP subsidizes bidders of “toxic assets” by offering below-market financing rates 
and absorbing losses beyond a predetermined level. 

The United States Federal Reserve System and the Bank of England provided new secured 
lending facilities to large dealer banks when they were no longer able to obtain credit 
from traditional counterparties or the repo market. When the dealer bank’s solvency is 
questioned, tri-party clearing banks are likely to limit their exposure to the dealer bank. 

A tri-party repo utility is proposed as an alternative and would be designed to have fewer 
conflicting incentives and less discretion in rolling over a dealers repo positions. New 
standards could be adapted for transaction documentation, margin requirements, and 
daily substitution of collateral with respect to repos. These standards could be incorporated 
through either the new repo utility or traditional tri-party clearing approaches. 

Another potential approach is the creation of an “emergency bank” that could manage the 
orderly unwinds of repo positions of dealer banks with liquidity difficulties. The central 
bank would grant access to the discount window for the emergency bank to insulate critical 
clearing banks from losses during this unwinding process. 

Capital requirements will most likely be increased and include off-bala n ce sheet positions 
in an effort to reduce the leverage positions of dealer ba nks . The separation of tri-party repo 
clearing from other clearing account functions would also reduce a dealer bank’s leverage by 
tightening the dealer’s cash-management flexibility. 

Central clearing will reduce the threat of OTC derivatives counterparties fleeing a 
questionable dealer bank. Although this would not eliminate the liquidity effect resulting 
from a derivative counterparty reducing their exposure to a particular dealer bank, it would 
reduce the total exposure to the dealer that would need to be managed through clearing. 

Some large dealer banks and financial institutions are viewed as being “too-big-to- 
fail” based on the systemic risk their insolvency would place on the financial markets. 
Therefore, another proposed resolution for large dealer banks with questionable solvency 
that are deemed too-big-to-fail is to provide bridge banks similar to the approach used for 
traditional hanks. 
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Key Concepts 



LO 54.1 

Large dealer banks are active participants in over-the-counter (OTC) derivatives, repo, 
and securities markets. Their functions in these markets, as well as asset managers and 
prime brokers, result in a variety of liquidity risks when their solvency is questioned and 
counterparties reduce their exposure with them. 



LO 54.2 

A liquidity crisis is accelerated when prime broker clients or counterparties in the OTC 
derivatives or repo markets question the solvency of a dealer bank and desire to exit their 
positions or reduce their exposures with the dealer bank. 



LO 54.3 

The basic economic principles of a liquidity crisis for a dealer bank are similar to a 
traditional bank run. However, the institutional mechanisms and systemic destructiveness 
are much more widespread for a dealer bank. 



LO 54.4 

The creation of emergency banks in the form of tri-party repo utilities and clearing banks 
are policy proposals to mitigate firm specific and systemic liquidity risk in the OTC 
derivatives and repo markets. The U.S. Treasury Departments 2008 Troubled Asset Relief 
Program (TARP) was designed to mitigate adverse selection in “toxic” asset markets by 
providing below market financing and absorbing losses above a pre-specified amount. 
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Concept Checkers 



1 . A dealer bank’s liquidity crisis is least likely to be accelerated by: 

A. the refusal of repurchase agreement creditors to renew their positions. 

B. the flight of prime brokerage clients. 

C. a counterparty’s request for a novation through another dealer bank. 

D. depositors removing their savings from the dealer bank. 

2. Banks are most likely to diversify their exposure to a specific asset class such as 
mortgages by grouping these assets together and selling them to: 

A. hedge funds. 

B. government agencies. 

C. the U.S. Federal Reserve. 

D. special purpose entities. 

3. The formation of large bank holding companies results in diseconomies of scope 
with respect to: 

A. risk management. 

B. technology. 

C. marketing. 

D. financial innovation. 

4. One potential solution for mitigating the liquidity risk caused by derivatives 
counterparties exiting their large dealer bank exposures is most likely the: 

A. use of central clearing. 

B. use of a novation through another dealer bank. 

C. requirement of dealer banks to pay out cash to reduce counterparty exposure. 

D. creation of new contracts by counterparties. 

5. Which of the following items is not a policy objective of the U.S. Treasury 
Department s 2008 Troubled Asset Relief Program to help dealer ha nks recover from 
the subprime market crisis? 

A. Provide below-market financing rates for bidders of “toxic” assets. 

B. Absorb losses beyond a pre -specified level. 

C. Force the sale of illiquid assets in order to better determine the “true” value. 

D. Mitigate the effect of adverse selection. 
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Concept Checker Answers 



1 . D A liquidity crisis for a dealer bank is accelerated if counterparties try to reduce their exposure 

by restructuring existing OTC derivatives with the dealer or by requesting a novation. The 
flight of repo creditors and prime brokerage clients can also accelerate a liquidity crisis. 
Lastly, the loss of cash settlement privileges is the final collapse of a dealer banks liquidity. 

2. D Banks can diversify their exposure to a specific asset class, such as mortgages, by grouping 

these assets together and selling them to special purpose entities. 

3. A Some argue that information technology, marketing, and financial innovation result in 

economies of scope for large bank holding companies. Conversely, the recent financial crisis 
raised the concern that the size of bank holding companies creates diseconomies of scope 
with respect to risk management. 



4. A 



One potential solution for mitigating the liquidity risk caused by derivatives counterparties 
exiting their large dealer bank exposures is the use of central clearing through a counterparty. 
However, central clearing is only effective when the underlying securities have standardized 
terms. The reduction of a counterparty’s exposure through novation, entering new offsetting 
contracts, or requiring a dealer bank to cash out of a position will all reduce the liquidity of 
the dealer bank. 



5. C The U.S. Treasury Departments 2008 Troubled Asset Relief Program was designed to create 
policies to help dealer banks recover from the subprime market crisis by mitigating the effect 
of adverse selection, by providing below- market financing rates for bidders of “toxic” assets, 
and by absorbing losses beyond a pre-specified level. Forcing the sale of illiquid assets would 
worsen the liquidity position of the troubled dealer bank. 



Page 226 



©2015 Kaplan, Inc. 





The following is a review of the Operational and Integrated Risk Management principles designed to address 
the learning objectives set forth by GARP®. This topic is also covered in: 



Basel I, Basel II, and Solvency II 



Topic 55 

Exam Focus 

This topic provides an overview of the international capital standards put in place by the 
Basel Committee on Banking Supervision. Basel I (1988) contained the first steps toward 
risk-weighting bank activities on- and off-balance sheet to relate required capital to risk. 

Basel I was the first to set a capital to risk-weighted assets requirement, but it only considered 
credit risk, not market or operational risk. Basel II took a more sophisticated approach to 
measuring bank credit risk, market risk, and operational risk. For the exam, understand 
the contribution Basel II makes to risk measurement, and know the differences between 
the methods used to calculate various risks. Also, know the difference between Basel II 
and Solvency II, a similar international standard for insurance companies, and the likely 
repercussions a firm will face if it breaches the standards. In addition, be able to calculate a 
banks required capital under the various regimes. One of the recurring themes in this topic is 
the difference between a standardized approach for measuring risk, used by less sophisticated 
banks (and insurance companies), and an internal approach that is firm specific and more 
complex but often lowers required capital because it allows banks to use their own model 
inputs and considers the correlations between assets. 



Prior to 1988, bank capital regulations were inconsistent across countries and ignored the 
riskiness of individual banks. Requirements were stated as minimum ratios of capital to 
total assets or as maximum ratios of total assets to capital. Some countries a n d/or regulatory 
authorities were more diligent in their enforcement of capital regulations than others. As 
banks became increasingly global, banks operating in countries with more lax standards 
were perceived to have a competitive advantage over banks operating in countries with strict 
enforcement of capital regulations. 

There were additional problems with the existing regime. First, high risk loans from 
international banks to lesser developed countries such as Mexico and Brazil raised 
questions about the adequacy of existing capital to cover potential losses. Second, banks 
used “accounting games” to record some of these transactions, masking risk. Third, bank 
transactions were becoming more complex. Off-balance sheet transactions in over-the- 
counter (OTC) derivatives like interest rate swaps, currency swaps, and options were 
growing. These off-balance sheet deals did not affect total assets, and thus did not affect 
the amount of capital a bank was required to keep, providing fuel to the growing belief that 
total assets did not reflect a banks total risk. In 1988, the Basel Committee put forth its 
first guidance to set international risk-based capital adequacy standards, called the 1 988 BIS 
Accord, now commonly known as Basel I. 
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Basel I 



LO 55.1: Explain the calculation of risk-weighted assets and the capital 
requirement per the original Basel 1 guidelines. 



Basel I put forth two capital requirements: 

1 . The bank’s total assets to capital ratio had to be less than 20 (i.e., capital to total 
assets had to be greater than 1/20 or 5%). This capital requirement was similar to the 
requirements in many countries prior to 1988. 

2. The bank’s on- and off-balance sheet items had to be used to calculate risk- weighted 
assets (RWA). RWA is intended to measure a bank’s total credit exposure. The ratio of 
capital to risk-adjusted assets is called the Cooke ratio, after Peter Cooke from the Bank 
of England. Basel I stipulated that the Cooke ratio must exceed 8%. 

Most banks met the first requirement. However, the risk-based capital requirement (i.e., the 
second requirement) was the key change to capital regulation. The process for calculating 
risk-weighted assets includes assigning a risk weight that reflects the ha n k’s credit risk 
exposure, to each of the on- and off-balance sheet items. A sample of some of the risk 
weights assigned to various asset categories is shown in Figure 1 . 



Figure 1: Risk Weights for On-Balance Sheet Items 



Risk Weight (%) 


Asset Category 


0% 


Cash, gold, claims on Organisation of Economic Co-operation and 
Development (OECD) countries such as U.S. Treasury bonds and insured 
residential mortgages 


20% 


Claims on OECD banks and government agencies like U.S. agency 
securities or municipal bonds 


50% 


Uninsured residential mortgages 


100% 


Loans to corporations, corporate bonds, claims on non-OECD banks 



Example: Risk-weighted assets 

The assets of Blue Star Bank consist of $20 million in U.S. Treasury bills, $20 million in 
insured mortgages, $50 million in uninsured mortgages, and $150 million in corporate 
loans. Using the risk weights from Figure 1 , calculate the bank’s risk-weighted assets. 

Answer: 

(0.0 x $20) + (0.0 x $20) + (0.5 x $50) + (1.0 x $150) = $175 million 
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Off-balance sheet items are expressed as a credit equivalent amount. The credit equivalent 
amount is, in essence, the loan principal that is considered to have the same credit risk. This 
means the bank “converts” off-balance sheet items into on-balance sheet equivalents for the 
purpose of calculating risk-based capital. The weight is then multiplied by the principal 
amount (Le., the credit equivalent amount) of the item to arrive at a risk-weighted value. A 
conversion factor is applied to the principal amount of the instrument for non-derivatives. 
Off-balance sheet items that are similar, from a credit perspective, to loans (e.g., bankers 
acceptances), have a conversion factor of 100%. Other off-balance sheet items, such as note 
issuance facilities, have lower conversion factors. 

For interest rates swaps and other over-the-counter (OTC) derivatives, the credit equivalent 
amount is calculated as: 



max(V, 0) + a x L 



where: 

V = current value of the derivative to the bank 
a = add-on factor 
L = principal amount 

The first term in the equation [max(V, 0)] reflects the banks current exposure. If the 
counterparty defaults and V, the current value of the derivative, is positive, the bank will 
lose V. If the counterparty defaults and Vds negative, the exposure is 0 (i.e., no gain or loss 
to the bank). The add-on amount (a x L) allows for the possibility that the h an ks exposure 
may increase in the future. Add-on factors are higher for higher risk derivatives (e.g., longer 
maturities, riskier underlying assets). A sample of add-on factors is shown in Figure 2. 



Figure 2: Add-on Factors as a Percent of Principal for Derivatives 



Remaining Maturity 
in Years 


Interest Rate 


Exchange Rate 
and Gold 


Equity 


Other 

Commodities 


< 1 year 


0.0 


1.0 


6.0 


10.0 


1 to 5 years 


0.5 


5.0 


8.0 


12.0 


> 5 years 


1.5 


7.5 


10.0 


15.0 



Example: Credit equivalent amounts for off-balance sheet items 

Blue Star Ba nk has entered a $175 million interest rate swap with a remaining maturity 
of three years. The current value of the swap is $2.5 million. Using the add-on factors in 
Figure 2, calculate the swaps credit equivalent amount. 

Answer: 

The add-on factor is 0.5% of the interest rate swap principal. 

credit equivalent amount = $2.5 + (0.005 x $175) = $3,375 million 
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The credit equivalent amount is multiplied by the risk weight for the counterparty to 
calculate risk-weighted assets. Risk weights are similar to those shown in Figure 1 with the 
exception of corporate counterparties. If the counterparty is a corporation, the risk weight is 
50%. If the counterparty is an OECD bank, the risk weight is 20%. 



Example: Calculating risk-weighted assets for an off-balance sheet item 

In the previous example. Blue Star Bank entered an interest rate swap that had a credit 
equivalent amount of $3,375,000. Calculate the risk-weighted assets assuming (1) the 
counterparty is an OECD bank and (2) the counterparty is a corporation. 

Answer: 

EWA assuming counterparty is an OECD bank: $3,375,000 x 0.2 = $675,000 
EWA assuming counterparty is a corporation: $3,375,000 x 0.5 = $1,687,500 



The total KWAs of the bank are calculated by summing the on- and off-balance sheet risk- 
weighted items as follows: 

N M 

J^WiLi+^WjCj 

1=1 H 

where: 

Wj = the risk weight of the counterparty of the z'th on-balance sheet item 
Lj = principal of the rth on-balance sheet item 

Wj = the risk weight of the counterparty of theyth off-balance sheet item 
C. = credit equivalent amount of the jr’th off-balance sheet item 

The bank must maintain at least 8% capital to risk- weigh ted assets. 



Example: Calculating risk-based capital 

Using the information from the previous three examples, calculate Blue Star Banks 
required capital, assuming the swap counterparty is a corporation. 

Answer: 

($175 million + $1.6875 million) x 0.08 = $14,135 million 
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According to Basel I, capital has two components. Tier 1 capital and Tier 2 capital. 

Tier 1 capital (or core capital) consists of items such as: 

• Equity (subtract goodwill from equity). 

• Non-cumulative perpetual preferred stock. 

Tier 2 capital (or supplementary capital) consists of items such as: 

• Cumulative perpetual preferred stock. 

• Certain types of 99-year debentures. 

• Subordinated debt with an original maturity greater than five years (where the 
subordination is to depositors). 

Equity capital (i.e.. Tier 1) absorbs losses. Supplementary capital (i.e.. Tier 2) is subordinate 
to depositors and thus protects depositors in the event of a bank failure. At least 50% 
of capital must be Tier 1 . This means there is a 4% Tier 1 capital to risk-weighted assets 
requirement (i.e., 8% x 0.5). Half of the Tier 1 requirement has to be met with common 
equity. Under Basel I, some countries required banks to have more capital than required by 
The Accord. 




Professor’s Note: Basel I had a number of shortcomings that were remedied 
over the coming years with new capital accords. For example, Basel I treats all 
corporate loans the same in terms of capital requirements. The creditworthiness 
of the borrower is ignored. Also, Basel I did not include a model of default 
correlation. 



Market Risk Capital Requirements 



LO 55.2: Describe and contrast the major elements — including a description of the 
risks covered — of the two options available for the calculation of market risk: 

• Standardized Measurement Method 

• Internal Models Approach 



The goal of the 1996 Amendment to the 1988 Basel Accord was to require ba n ks to 
measure market risks associated with trading activities and maintain capital to back those 
risks. Banks must mark-to-market {i.e.., fair value accounting bonds, marketable equity 
securities, commodities, foreign currencies, and most derivatives that are held by the bank 
for the purpose of trading (referred to as the trading book). Banks do not have to use fair 
value accounting on assets they intend to hold for investment purposes (referred to as 
the banking book). This includes loans and some debt securities. The 1996 Amendment 
proposed two methods for calculating market risk: 

1 . Standardized Measurement Method. 

2. Internal Model-Based Approach. 

Standardized Measurement Method. This method assigns a capital charge separately to 
each of the items in the trading book. It ignores correlations between the instruments. 
Ba n ks with less sophisticated risk management processes are more likely to use this 
approach. 
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Internal Model-Based Approach. This method involves using a formula specified in the 
amendment to calculate a value at risk (VaR) measure and then convert the VaR into a 
capital requirement. Capital charges are generally lower using this method because it better 
reflects the benefits of diversification (i.e., correlations between the instruments). As such, 
banks with more advanced risk management fu n ctions prefer the internal models approach. 

Risks covered by the VaR model include movements in broad market variables such as 
interest rates, exchange rates, stock market indices, and commodity prices. 

The VaR model does not incorporate company-specific risks such as changes in a firms 
credit spread or changes in a company’s stock price. The specific risk charge (SRC) captures 
company-specific risks. For example, a corporate bond has interest rate risk, captured 
by VaR, and credit risk, captured by the SRC. Tier 3 capital consisting of short-term 
subordinated, unsecured debt with an original maturity of at least two years could be used 
to meet the market risk capital requirement at the time of the amendment. Tier 3 capital 
has subsequently been eliminated under Basel III. 



LO 55-3: Calculate VaR and the capital charge using the internal models approach, 
and explain the guidelines for backtesting VaR according to the 1 996 Basel 
guideline. 



According to the 1996 Amendment, the market risk VaR is calculated with a 10-trading day 
time horizon and a 99% confidence level. The market risk capital requirement is calculated 
as: 



max(VaR t _p m c x VaR av ) + SRC 
where: 

VaR t l = previous days VaR 

VaR avg - the average VaR over the past 60 trading days 
m c = multiplicative factor 

SRC - specific risk charge 

The multiplicative factor must be at least three, but may be set higher by bank supervisors 
if they believe a bank’s VaR model has deficiencies. This means the capital charge will be 
the higher of either the previous days VaR or three times the average of the daily VaR plus a 
charge for company specific risks (i.e., the SRC). 

Banks calculate a 10-day, 99% VaR for SRC. Regulators then apply a multiplicative factor 
(which must be at least four) similar to m c to determine the capital requirement. The total 
capital requirement for banks using the internal model-based approach must be at least 
50% of the capital required using the standardized approach. 

The bank’s total capital charge, according to the 1996 Amendment, is the sum of the capital 
required according to Basel I, described in LO 55.1, and the capital required based on the 
1996 Amendment, described in this LO. For simplicity, the RWAs for market risk capital 
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was defined as 12.5 times the value given in the previous equation. The total capital a bank 
has to keep under the 1996 Amendment is: 



total capital = 0.08 x (credit risk RWA + market risk RWA) 
where: 

market RWA = 12.5 x (max(VaR tl , m c x VaR avg ) + SRC) 

credit RWA - £(RWA on-balance sheet) + E(RWA off-balance sheet) 

Example: Market risk capital charge 

A bank calculates the previous days market risk VaR as $10 million. The average VaR 
over the preceding 60 trading days is $8 million. The specific risk charge is $5 million. 
Assuming a multiplicative factor of three, calculate the market risk capital charge. 

Answer: 

market risk capital charge = 0.08 x {12.5 x [(3 x $8 million) + $5 million]} 

- $29 million 



Backtesting 

The 1996 Amendment requires banks to backtest the one-day, 99% VaR over the previous 
250 days. A bank calculates the VaR using its current method for each of the 250 trading 
days and then compares the calculated VaR to the actual loss. If the actual loss is greater 
than the estimated loss, an exception is recorded. The multiplicative factor (m c ) is set based 
on the number of exceptions. If, over the previous 250 days, the number of exceptions is: 

• Less than 5, m c is usually set equal to 3. 

• 5, 6, 7, 8, or 9, m c is set equal to 3.4, 3.5, 3.65, 3.75, and 3.85, respectively. 

• Greater than 1 0, m c is set equal to 4. 

The bank supervisor has discretion regarding the multiplier. If the exception is due to 
changes in the bank’s positions during that day, the higher multiplier may or may not be 
used. If the exception is due to deficiencies in the banks VaR model, higher multipliers are 
likely to be applied. There is no guidance to supervisors in terms of higher multipliers if an 
exception is simply the result of bad luck. 
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Credit Risk Capital Requirements 



LO 55.4: Describe and contrast the major elements of the three options available 
for the calculation of credit risk: 

• Standardized Approach 

• Foundation IRB Approach 

• Advanced IRB Approach 

LO 55.7: Define in the context of Basel II and calculate where appropriate: 

• Probability of default (PD) 

• Loss given default (LGD) 

• Exposure at default (EAD) 

• Worst-case probability of default 



Basel II specifies three approaches that banks can use to measure credit risk: 

1 . Standardized approach. 

2. Foundation internal ratings based (IRB) approach. 

3. Advanced IRB approach. 

The Standardized Approach 

The standardized approach is used by banks with less sophisticated risk management 

functions. The risk-weighting approach is similar to Basel I, although some risk weights 

were changed. Significant changes include: 

• OECD status is no longer considered important under Basel II. 

• The credit ratings of countries, banks, and corporations are relevant under Basel II. 

For example, sovereign (country) risk weights range from 0% to 150%, and bank and 
corporate risk weights range from 20% to 150%. 

• Bank supervisors may apply lower risk weights when the exposure is to the country in 
which the bank is incorporated. 

• Bank supervisors may choose to base risk weights on the credit ratings of the countries 
in which a bank is incorporated rather than on the banks credit rating. For example, if 
a sovereign rating is AAA to AA— , the risk weight assigned to a bank is 20%. The risk 
weight increases to 150% if the country is rated below B— and is 100% if the country’s 
bonds are unrated. 

• Risk weights are lower for unrated countries, banks, and companies than for poorly rated 
countries, banks, and companies. 

• Bank supervisors who elect to use the risk weights in Figure 3 are allowed to lower the 
risk weights for claims with maturities less than three months. For example, the risk 
weights for short- maturity assets may range from 20% if the rating is between AAA to 
BBB-or unrated, to 150% if the rating is below B— . 

• A 75% risk weight is applied to retail loans, compared to 100% under Basel I. A 100% 
risk weight is applied to commercial real estate loans. The uninsured residential mortgage 
risk weights are 35% under Basel II, down from 50% under Basel I. 

A sample of risk weights under the standardized approach is presented in Figure 3. 
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Figure 3: Risk Weights (as a Percent) Under Basel IPs Standardized Approach 
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Collateral Adjustments 

Banks adjust risk weights for collateral using the simple approach, similar to Basel I, or the 
comprehensive approach, used by most banks. Under the simple approach, the risk weight 
of the collateral replaces the risk weight of the counterparty. The counterparty’s risk weight 
is used for exposure not covered by collateral. Collateral must be revalued at least every six 
months. A minimum risk weight of 20% is applied to collateral. Using the comprehensive 
approach, banks adjust the size of the exposure upward and the value of the collateral 
downward, depending on the volatility of the exposure and of the collateral value. 



Example: Adjusting for collateral using the simple approach 

Blue Star Bank has a $ 1 00 million exposure to Monarch, Inc. The exposure is secured by 
$80 million of collateral consisting of AAA-rated bonds. Monarch has a credit rating of 
B. The collateral risk weight is 20% and the counterparty risk weight is 150%. Using the 
simple approach, calculate the risk-weighted assets. 

Answer: 

(0.2 x 80) + (1.5 x 20) = $46 m illion risk-weighted assets 



Example: Adjusting exposure and collateral using the comprehensive approach 

Blue Star Bank assumes an adjustment to the exposure in the previous example of + 15% 
to allow for possible increases in the exposures. The bank also allows for a -20% change in 
the value of the collateral. Calculate the new exposure using the comprehensive approach. 

Answer: 

(1.15 x 100) — (0.8 x 80) = $51 million exposure 
Applying a risk weight of 150% to the exposure: 

1.5 x 51 = $76.5 million risk-weighted assets 
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The Internal Ratings Based (IRB) Approach 

United States regulators applied Basel II to large banks only. As such, regulatory authorities 
decided that the IRB approach must be used by U.S. banks. Under the IRB approach, the 
capital requirement is based on a VaR calculated over a one-year time horizon and a 99-9% 
confidence level. The model underlying this approach is shown in Figure 4. 



Figure 4: Capital Requirement 



VaR - loss at a very high 

confidence level (99.9%) expected loss 




The goal of the IRB approach is to capture unexpected losses (UL). Expected losses (EL) 
should be covered by the bank’s pricing (e.g., charging higher interest rates on riskier loans 
to cover EL). The capital required by the bank is thus VaR minus the bank’s EL. The VaR 
can be calculated using a Gaussian copula model of time to default. That is: 



WCDRi = N 



N~ 1 (PD i ) + > /pN- 1 (0-999) 
n/i^P 



In this equation, WCDR ; is the worst case probability of default. The bank can be 99-9% 
certain that the loss from the /th counterparty will not exceed this amount in the coming 
year. PD is the one-year probability of default of the z’ th obligor given a large number of 
obligors, and p is the copula correlation between each pair of obligors. 




Professor’s Note: WCDR is called the worst case probability of default in the 
assigned reading. It is also called the worst case default rate, hence the acronym 
WCDR. 



Assuming the bank has a large portfolio of instruments such as loans and derivatives with 
the same correlation, the one-year, 99-9% VaR is approximately: 



VaR 99 9 Q /0) ~ T>AD, xLGDj xWCDRj 

l 
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EAD- is the exposure at default of the counterparty or the dollar amount the z^ 1 

counterparty is expected to owe if it defaults. For example, if the counterparty has a loan 
outstanding, EAD would likely be the principal amount outstanding on the loan at the time 
of default. LGD- is the loss given default for the counterparty or the proportion of the 
EAD. that is expected to be lost in the event of default. For example, if the bank expected to 
collect (i.e., recover) 40% in the event of default, the LGDj would be 60% (i.e., 1 — 0.4 - 
0 . 6 ). 

Recall from Book 2 that the expected loss (EL) from default is computed as: 

= EADj x LGDj x PD j 

i 

The capital the bank is required to maintain is the excess of the worst-case loss over the 
banks expected loss defined as follows: 



required capital = ^^EADj X LGDj X (WCDRj — PDj) 

i 

Note that WCDR, PD, and LGD are expressed as decimals while EAD is expressed in 
dollars. 

Figure 5 shows the dependence of the one-year WCDR on PD and correlation, p. 



Figure 5: Dependence of One- Year, 99.9% WCDR on PD and p 
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It is clear from Figure 5 that WCDR increases as the correlation between each pair of 
obligors increases and as the probability of default increases. If the correlation is 0, then 
WCDR is equal to PD. 

Basel II assumes a relationship between the PD and the correlation based on empirical 
research. The formula for correlation is: 



p = 0.12 x (1 + <f 50 * PD ) 

Note that there is an inverse relationship between the correlation parameter and the PD. 

As creditworthiness declines, the PD increases. At the same time, the PD becomes more 
idiosyncratic and less affected by the overall market, thus the inverse relationship. 

The relationship between WCDR and PD, as shown in Figure 6, is obtained by combining 
the previous equation with the calculation of WCDR. The WCDR increases as the PD 
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increases, but not as fast as it would if the correlation were assumed to be independent of 
PD. 

Figure 6: Relationship Between WCDR and PD for Firm, Sovereign, and Bank Exposures 
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From a counterparty's perspective, the capital required for the counterparty incorporates a 
maturity adjustment as follows: 



required capital = EAD x LGD x (WCDR - PD) x MA 
where: 

MA = maturity adjustment = (1 + (M — 2.5) x b)i{\ - 1.5 x b) 

M = maturity of the exposure 
b = [0. 1 1852 - 0.05478 x ln(PD)] 2 

The maturity adjustment, MA, allows for the possibility of declining creditworthiness and/ 
or the possible default of the counterparty for longer term exposures (i.e., longer than one 
year). If M = 1.0, then MA =1.0 and the maturity adjustment has no impact. The risk- 
weighted assets are calculated as 12.5 times capital required: 



RWA = 12.5 x [EAD x LGD x (WCDR - PD) x MA] 



The capital required is 8% of RWA. The capital required should be sufficient to cover 
unexpected losses over a one-year period with 99.9% certainty (i.e., the bank is 99-9% 
certain the unexpected loss will not be exceeded). Expected losses should be covered by the 
bank’s product pricing. Theoretically, the WCDR is the probability of default that happens 
once every 1,000 years. If the Basel Committee finds the capital requirements too high 
or too low, it reserves the right to apply a scaling factor (e.g., 1.06 or 0.98) to increase or 
decrease the required capital. 




Professor’s Note: On the exam. , if you begin with RWA , multiply by 0.08 to 
get the capital requirement. If instead you begin with the capital requirement, 
multiply by 12.5 (or divide by 0.08) to get RWA. In other words, these 
percentages are simply reciprocals (i.e., 1/0.08 - 12.5). 



Foundation IRB Approach vs. Advanced IRB Approach 

The foundation IRB approach and the advanced IRB approach are similar with the 
exception of who provides the estimates of LGD, EAD, and M. The key differences 
between the two approaches are outlined below. 
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Foundation IRB Approach 

• The bank supplies the PD estimate. For bank and corporate exposures, there is a 0.03% 
floor set for PD. 

• The LGD, EAD, and M are supervisory values set by the Basel Committee. The Basel 
Committee set LGD at 45% for senior claims and 75% for subordinated claims. If there 
is collateral, the LGD is reduced using the comprehensive approach described earlier. 

• The EAD is calculated similar to the credit equivalent amount required under Basel I. It 
includes the impact of netting. 

« M is usually set to 2.5- 

Advanced IRB Approach 

• Banks supply their own estimates of PD, LGD, EAD, and M. 

• PD can be reduced by credit mitigants such as credit triggers subject to a floor of 0.03% 
for bank and corporate exposures. 

• LGD is primarily influenced by the collateral and the seniority of the debt. 

• With supervisory approval, banks can use their own estimates of credit conversion factors 
when calculating EAD. 

Foundations IRB Approach and Advanced IRB Approach for Retail Exposures 

• The two methods are merged for retail exposures. Banks provide their own estimates of 
PD, EAD, and LGD. 

« There is no maturity adjustment (MA) for retail exposures. 

• The capital requirement is EAD x LGD x (WCDR— PD). 

• Risk-weighted assets are 12.5 x EAD x LGD x (WCDR — PD). 

• Correlations are assumed to be much lower for retail exposures than for corporate 
exposures. 

Example: RWA under the IRB approach 

Assume Blue Star Bank has a $150 million loan to an A-rated corporation. The PD is 
0.1% and the LGD is 50%. Based on Figure 6, the WCDR is 3.4%. The average maturity 
of the loan is four years. Calculate the RWA using the IRB approach and compare it to 
the RWA under Basel I. 

Answer: 

b = [0.1 1852 - 0.05478 x ln(O.OOl)] 2 = 0.247 
MA = 1/ (1 - (1.5 x 0.247)) = 1.59 

risk-weighted assets = 12.5 x 150 x 0.5 x (0.034 — 0.001) x 1.59 = $49.19 million 

Under Basel I, the RWA for corporate loans was 100% or $150 million in this case. Thus, 
the IRB approach lowers the RWA for higher rated corporate loans, in this case from 
$150 million to $49.19 million. 
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Operational Risk Capital Requirements 



LO 55.5 : Describe and contrast the major elements of the three options available 
for the calculation of operational risk: basic indicator approach, standardized 
approach, and the advanced measurement approach. 



Basel II requires banks to maintain capital for operational risks. Operational risks include 
failures of the bank’s procedures that result in loss (e.g., fraud, losses due to improper 
trading activities). External events that result in loss, such as a fire, are also considered 
operational risks. 

Under Basel II, there are three approaches banks may use to calculate capital for operational 
risk: 

1 . Basic indicator approach. 

2. Standardized approach. 

3. Advanced measurement approach. 

Basic Indicator Approach (BIA). This is the simplest approach and is used by banks with 
less sophisticated risk management functions. The required capital for operational risk is 
equal to the banks average annual gross income (i.e., net interest income plus non-interest 
income) over the last three years multiplied by 0.15. 

The Standardized Approach (TSA). This method is similar to the basic indicator approach. 
The primary difference between the two approaches is that a different multiplier is applied 
to the banks gross income for different lines of business. 

Advanced Measurement Approach (AMA). Like the IRB approach discussed for credit risk, 
the capital requirement for operational risk under the advanced measurement approach is 
based on an operational risk loss (i.e., VaR) calculated over a one-year time horizon with a 
99-9% confidence level. The approach has an advantage in that it allows banks to consider 
risk mitigating factors such as insurance contracts (e.g., fire insurance). 




Professor’s Note: While Basel II generally lowered credit risk capital requirements 
for most banks , requiring banks to hold capital for operational risks had the 
effect of raising overall capital requirements back to (approximately) Basel I 
levels. 



Basel II Pillars of Sound Bank Management 



LO 55-6: Describe the key elements of the three pillars of Basel II: minimum 
capital requirements, supervisory review, and market discipline. 



While Basel I improved the way capital requirements were determined for banks worldwide, 
it had some major limitations. First, all corporate loans were treated the same (i.e., a risk 
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weight of 100%) regardless of the creditworthiness of the borrower. A firm with an AAA 
credit rating was treated the same as a borrower with a C rating. Basel I also ignored the 
benefits of diversification (i.e., there was no model of default correlation). Basel II, proposed 
in June 1999 and after multiple revisions was published in 2004 and implemented in 2007, 
corrected a number of the deficiencies in Basel I. The rules applied to “internationally 
active” banks and thus many small regional banks in the United States were not subject to 
the requirements but fell under Basel IA, similar to Basel I, instead. All European banks are 
regulated under Basel II. 

There are three pillars under Basel II: (1) minimum capital requirements, (2) supervisory 
review, and (3) market discipline. 

Pillar 1 : Minimum Capital Requirements 

The key element of Basel II regarding capital requirements is to consider the credit ratings 
of counterparties. Capital charges for market risk remained unchanged from the 1996 
Amendment. Basel II added capital charges for operational risk. Banks must hold total 
capital equal to 8% of risk-weighted assets under Basel II, as under Basel I. Total capital 
under Basel II is calculated as: 



total capital = 0.08 x (credit risk RWA + market risk RWA + operational risk RWA) 



Pillar 2: Supervisory Review 

Basel II is an international standard, governing internationally active banks across the world. 
A primary goal of Basel II is to achieve overall consistency in the application of capital 
requirements. However, Pillar 2 allows regulators from different countries some discretion 
in how they apply the rules. This allows regulatory authorities to consider local conditions 
when implementing rules. Supervisors must also encourage banks to develop better risk 
management functions and must evaluate bank risks that are outside the scope of Pillar 1, 
working with banks to identify and manage all types of risk. 

Pillar 3: Market Discipline 

The goal of Pillar 3 is to increase transparency. Banks are required to disclose more 
information about the risks they take and the capital allocated to these risks. The key 
idea behind Pillar 3 is that if banks must share more information with shareholders (and 
potential shareholders), they will make better risk management decisions. Banks have 
discretion in determining what is relevant and material and thus what should be disclosed. 
According to Basel II, banks should disclose: 

• The entities (banks and other businesses such as securities firms in Europe) to which 
Basel II rules are applied. 

• A description of the characteristics, terms, and conditions of all the capital instruments 
held by the bank. 

• A list of the instruments comprising the banks Tier 1 capital. The amount of capital 
provided by each instrument should also be disclosed. 

• A list of the instruments comprising the banks Tier 2 capital. 
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• The capital requirements for each type of risk covered under Basel II: credit, market, and 
operational risks. 

• Information about other bank risks. 

• Inf ormation about the bank’s risk management function, how it is structured, and how it 
operates. 

Solvency II Framework 



LO 55.8: Differentiate between solvency capital requirements (SCR) and 
minimum capital requirements (MCR) in the Solvency II framework, and describe 
the repercussions to an insurance company for breaching the SCR and MCR. 



There are no international standards to regulate insurance companies. In Europe, Solvency I 
establishes capital requirements for the underwriting risks of insurance companies. Solvency 
II is expected to replace Solvency I and will consider operational and investment risks in 
addition to underwriting risks. While Solvency II was expected to be implemented in 2013, 
the date has been postponed. Solvency II has three pillars, analogous to Basel II. 

Pillar 1 specifies a solvency capital requirement (SCR). The SCR may be calculated using 
the standardized approach or the internal models approach (discussed in the next LO). 
Repercussions for breaching the SCR are less severe than if the firm breaches a minimum 
capital requirement (MCR). If the SCR falls below the required level, the insurance 
company will likely be required to submit a plan for restoring the capital to the required 
amount. Specific measures, determined by regulators, may be required. 

Pillar 1 also specifies a minimum capital requirement (MCR), which is an absolute 
minimum of capital. There are at least two methods for calculating the MCR under 
consideration. First, MCR may be set as a percentage of the SCR. A second possibility is to 
calculate MCR the same way as SCR, but with a lower confidence level. The repercussions 
for breaching the MCR are severe. If a firm’s capital falls below the MCR, regulators 
will likely prohibit the company from taking new business. Regulators can also force 
the insurance company into liquidation and transfer the company’s insurance policies to 
another firm. 



LO 55-9: Compare the standardized approach and the internal models approach 
for calculating the SCR in Solvency II. 



The two approaches an insurance firm can use to calculate the SCR under Solvency II are: 

1 . Standardized approach. 

2. Internal models approach. 

Standardized Approach. Analogous to Basel II, the standardized approach to calculating 
SCR under Solvency II is intended for less sophisticated insurance firms that cannot or 
do not want to develop their own firm-specific risk measurement model. It is intended to 
capture the risk profile of the average firm and is more cost efficient for smaller firms with 
less fully developed risk management functions. 
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Internal Models Approach. This approach is similar to the IRB approach under Pillar 1 of 
Basel II. A VaR is calculated with a one-year time horizon and a 99.5% confidence level. 

There is a capital charge for the following three types of risk: 

1 . Underwriting risk : divided into risks arising from life insurance, non- life insurance (such 
as property and casualty insurance), and health insurance. 

2. Investment risk', divided into market risk and credit risk. 

3. Operational risk. 

Regulators have implemented quantitative impact studies (QISs) to examine whether capital 
is sufficient to weather significant market events. For example, QISs have considered large 
declines (i.e., 32%) in global stock markets, large declines (20%) in real estate prices, large 
increases (10%) or decreases (25%) in mortality rates, and so on. 

Internal models developed by insurance companies must satisfy the following three tests: 

1 . Statistical quality test: This tests the quality of the data and the methodology the firm 
uses to calculate VaR. 

2. Calibration test: This tests whether risks are measured in agreement with an industry- 
wide SCR standard. 

3. Use test: This test determines if the model is relevant and used by risk managers. 
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Key Concepts 



LO 55.1 

Under Basel I, banks calculated risk-weighted assets for on- and off-balance sheet items. 
Capital was required as a percentage of risk-weighted assets. For example, cash and Treasury 
securities received a 0% risk weight while commercial loans received a 100% risk weight. 
Off-balance sheet items were expressed as credit equivalent amounts and were “converted” 
into risk-weighted assets. Capital could be Tier 1 or Tier 2 but at least half of the capital 
requirement (4%) had to be met with Tier 1 capital (equity and non-cumulative perpetual 
preferred). 



LO 55.2 

Banks were required to measure market risk in addition to credit risk under the 1996 
Amendment to the 1988 Basel Accord. The 1996 Amendment proposed two methods for 
calculating market risk including the standardized measurement method and the internal 
model-based approach. The standardized method assigns a capital charge separately to each 
of the items in the trading book. This method ignores correlations between the instruments. 
The internal model-based approach uses a formula specified in the amendment to calculate 
a value at risk (VaR) measure used to determine the capital requirement. Capital charges are 
generally lower using this method because it considers correlations between the instruments. 



LO 55.3 

According to the 1996 Amendment, the market risk VaR is calculated with a 10-trading-day 
time horizon and a 99% confidence level. The capital requirement for market risk is: 



max(VaR t l , m c x VaR avg ) + SRC 
where: 

VaR t l = previous days VaR 

VaR av g = the average VaR over the past 60 days 

m c = multiplicative factor, minimum value of three 

SRC = specific risk charge 

The 1996 Amendment requires banks to backtest the one-day, 99% VaR over the previous 
250 days. If the actual loss is greater than the estimated loss, an exception is recorded. The 
multiplicative factor (m c ) is set based on the number of exceptions. If, over the previous 250 
days, the number of exceptions is: 

• Less than 5, m c is usually set equal to three. 

• 5, 6, 7, 8, or 9, m c is set equal to 3.4, 3.5, 3.65, 3.75, and 3.85, respectively. 

• Greater than 10, m c is set equal to four. 

The bank supervisor has discretion regarding the multiplier. 
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LO 55.4 

Basel II improves on Basel I in at least two ways. First, counterparty credit ratings are 
considered in calculating risk- weighted assets. Second, a model of default correlation is 
included. Basel II specifies three approaches banks can use to measure credit risk, including 
the standardized approach, the foundation internal ratings based (IRB) approach, and the 
advanced IRB approach. The standardized approach is the least complicated and the risk- 
weighting approach is similar to Basel I, although some risk weights were changed. Under 
the IRB approach, the capital requirement is based on a VaR calculated over a one-year time 
horizon and a 99-9% confidence level. The foundation IRB approach and the advanced IRB 
approach are similar. The key difference is who supplies the input variables. Banks supply 
their own estimates of probability of default (PD), loss given default (LGD), exposure at 
default (EAD), and the maturity adjustment (M) if using the advanced approach. Under the 
foundation approach, banks supply PD estimates, while the Basel Committee supplies the 
estimates of LGD, EAD, and M. 



LO 55.5 

Basel II requires banks to maintain capital for operational risks. Operational risks include 
failures of the banks procedures that result in loss (e.g., fraud, losses due to improper 
trading activities). External events that result in loss, such as a fire that destroys bank 
assets or information, are also considered operational risks. Under Basel II, there are 
three approaches banks may use to calculate capital for operational risk including the 
basic indicator approach (the simplest), the standardized approach (similar to the basic 
indicator approach but with different multipliers applied to different lines of business), 
and the advanced measurement approach (the most complex). The capital requirement for 
operational risk under the advanced measurement approach is based on an operational risk 
loss calculated over a one-year time horizon and a 99-9% confidence level (i.e., VaR). The 
approach has an advantage in that it allows banks to consider risk mitigating factors such as 
insurance contracts. 



LO 55.6 

Basel II is an international standard, governing “internationally active banks.” There are 

three pillars under Basel II as follows: 

1 . Minimum capital requirements. This pillar involves calculating capital based on the 
riskiness of the bank, taking into consideration credit risk, market risk, and operational 
risk. 

2. Supervisory review. A primary goal of Basel II is to achieve overall consistency in the 
application of the capital requirements across countries while, at the same time, giving 
supervisors discretion to consider market conditions in their own countries. 

3. Market discipline. Banks are required to disclose more information about the risks they 
take and the capital allocated to those risks. According to Basel II, if banks must share 
more information with shareholders (and potential shareholders), they will make better 
risk management decisions. 
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LO 55.7 

In the context of Basel II, the worst case probability of default (WCDR) is the amount the 
bank can be 99.9% certain the loss will not exceed (from a specific counterparty) in the 
coming year. The one-year probability of default (PD) is the probability that an obligor, 
given a large number of obligors, will default. The exposure at default (EAD) is the dollar 
amount a counterparty is expected to owe if it defaults. The loss given default (LGD) is the 
proportion of the EAD that is expected to be lost in the event the counterparty defaults. For 
example, if the bank expected to collect 40% in the event of default by a counterparty, the 
LGD is 60%. 



LO 55.8 

In Europe, Solvency I establishes capital requirements for the underwriting risks of 
insurance companies. Solvency II is expected to replace Solvency I and will consider 
operational and investment risks in addition to underwriting risks. Pillar 1 of Solvency II 
specifies: 

• Minimum capital requirement (MCR). The repercussions for breaching the MCR will 
likely include a prohibition from taking new business. Regulators may also force the 
insurance company into liquidation and transfer the company’s insurance policies to 
another firm. 

• Solvency capital requirement (SCR). Repercussions for breaching the SCR are less 
severe than if the firm breaches the MCR. If the SCR falls below the required level, the 
insurance company will likely be required to submit a plan for restoring the capital to 
the required amount. 



LO 55.9 

There are two approaches an insurance firm can use to calculate the SCR under Solvency II. 
They are the standardized approach and the internal models approach. The standardized 
approach is least complicated and is meant to capture the risk of the average firm. The 
internal models approach is similar to the IRB approach under Basel II. It involves 
calculating a VaR with a one-year time horizon and a 99-5% confidence level. 
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Concept Checkers 



1 . Michigan One Bank and Trust has entered a $200 million interest rate swap with 
a corporation. The remaining maturity of the swap is six years. The current value 
of the swap is $3.5 million. Using the table below to find the add-on factor for the 
interest rate swap, the equivalent risk-weighted assets (RWA) under Basel I is closest 
to: 



Add-on Factors as a Percentage of Principal for Derivatives 



Remaining Maturity in Years 


Interest Rate 


Equity 


< 1 year 


0.0 


6.0 


1 to 5 years 


0.5 


8.0 


> 5 years 


1.5 


10.0 



A. $3,000,000. 

B. $3,250,000. 

C. $3,500,000. 

D. $6,500,000. 

2. Saugatuck National Bank uses the internal model- based approach to set market 
risk capital as prescribed by the 1996 Amendment to the 1988 Basel Accord. The 
bank has backtested its 99%, one-day VaRs against the actual losses over the last 
250 trading days. Based on the results of the backtesting, the bank recorded 1 1 
exceptions. Based on these results, the multiplicative factor (m c ) in the model should 
be set: 

A. less than 3. 

B. equal to 3. 

C. between 3.1 and 3.9. 

D. equal to 4. 

3. Bank Macatawa has a $150 million exposure to Holland Metals Co. The exposure 
is secured by $125 million of collateral consisting of AA+-rated bonds. Holland 
Metals Co. is unrated. The collateral risk weight is 20%. Bank Macatawa assumes an 
adjustment to the exposure of +15% to allow for possible increases in the exposure 
and allows for a -25% change in the value of the collateral. Risk-weighted assets for 
the exposure are closest to: 

A. $78.75 million. 

B. $93.75 million. 

C. $118.13 m il l i on. 

D. $172.50 million. 

4. Which of the following accords first required b an ks to hold capital for operational 
risk? 

A. Basel I. 

B. The 1996 Amendment to Basel I. 

C. Basel II. 

D. Solvency II. 
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5. Which of the following statements is correct regarding capital requirements for 

insurance companies? 

A. Basel II includes the regulation of banks and insurance companies in the three 
pillars. 

B. The mini m um capital requirement is likely to be higher than the solvency 
capital requirement for insurance companies. 

C. The repercussion for violating the solvency capital requirement is likely 
liquidation and the transfer of company insurance policies to another firm. 

D. The internal models approach to calculating the solvency capital requirement is 
similar to internal ratings based approach under Basel II in that the firm must 
calculate a VaR with a one-year time horizon. 
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Concept Checker Answers 



1 . B The add-on factor is 1 .5 % of the interest rate swap principal for swaps with a maturity 

greater than five years. 

credit equivalent amount = max(V,0) + a x L 
where: 

V = current value of the derivative to the bank 
A = add-on factor 
L = principal amount 

credit equivalent amount = $3.5 + (0.015 x $200) = $6,500,000 

The risk-weight factor for a corporate counterparty under Basel I is 50% for derivatives and 
100% for corporate loans. This means the risk-weighted assets (RWA) are: 

RWA = 0.50 x $6,500,000 = $3,250,000 

2. D Saugatuck National Bank must compare the VaR calculated using its current method 

for each of the 250 trading days to the actual loss over the same period to determine the 
multiplicative factor. If the actual loss is greater than the estimated loss, an exception is 
recorded. If, over the previous 250 days, the number of exceptions is: 

• Less than 5, m c is usually set equal to three. 

• 5, 6, 7, 8, or 9, m t is set equal to 3.4, 3-5, 3.65, 3.75, and 3.85, respectively. 

• Greater than 10, nr is set equal to four. 

Therefore, with 1 1 exceptions recorded, m t should be set equal to four. 

3. A Exposure = (1.15 x 150) - (0.75 x 125) = 172.5 - 93.75 = $78.75 

The risk weight for an unrated corporate counterparty based on Figure 3 in the topic is 
100%. Applying the 100% risk weight, risk-weighted assets are: 

risk-weighted assets = 1.0 x 78.75 - $78.75 million 

4. C Basel II requires banks to maintain capital for operational risks. Banks can use three methods 

to measure operational risk. They are the basic indicator approach, the standardized 
approach, and the advanced measurement approach. 

5. D Solvency II, not Basel II, establishes capital requirements for insurance companies. The 

minimum capital requirement (MCR) is just that, a true floor and is thus likely to be lower 
than the solvency capital requirement (SCR). The repercussion for violating the MCR is 
likely the prohibition of taking new business and possible liquidation. The repercussion for 
violating the SCR is the requirement of a plan to remedy the situation and bring the capital 
back to the required level. The internal models approach is similar to the internal ratings 
based approach under Basel II in that the insurance company must calculate a one-year VaR 
with a 99.5% confidence level (versus 99.9% confidence for banks under Basel II). 
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the learning objectives set forth by GARP®. This topic is also covered in: 

Basel 2.5, Basel III, and Dodd-Frank 



Topic 56 

Exam Focus 

Following the 2007-2009 financial crisis, the Basel Committee on Banking Supervision 
implemented reforms to shore up bank capital. This topic describes the measures taken 
in Basel 2.5 and Basel III to increase capital and tighten the definition of what constitutes 
capital in normal periods, create buffers to protect banks against loss in stress periods, and 
encourage banks to better manage liquidity risks by requiring ha nk s to maintain liquidity 
coverage and net stable funding ratios. It also describes the major reforms in the Dodd- 
Frank Act that impact banks and bank regulation. For the exam, know the major changes to 
capital regulation, including the incremental risk charge, the comprehensive risk measure, 
the stressed VaR, the capital conservation buffer, and the countercyclical buffer. Understand 
why banks may use less mainstream funding sources, such as contingent convertible bonds, 
as a result of higher capital requirements. In addition, be able to calculate the leverage ratio, 
liquidity coverage ratio, and net stable funding ratio given a bank’s balance sheet. Finally, 
be able to recognize and describe major changes imposed on U.S. banks by Dodd-Frank, 
including the creation of the Financial Stability Oversight Council, the Office of Fina n cial 
Research, and the Bureau of Financial Protection. 



Stressed VaR 



LO 56.1: Describe and calculate the stressed value-at-risk measure introduced in 
Basel 2.5, and calculate the market risk capital charge. 



The implementation of Basel II coincided with the financial crisis of 2007—2009. Some 
people blamed Basel II because banks using the advanced internal ratings based (IRB) 
approach to calculate credit risk were allowed to use their own estimates of probability of 
default (PD), loss given default (LGD), and exposure at default (EAD). Some believed 
Basel II was a move toward self- regulation and allowed banks to underestimate risks. As a 
result, the Basel Committee on Banking Supervision implemented a series of changes to 
the calculation of market risk capital. These changes were part of Basel 2.5, implemented 
December 31, 2011. There were three primary changes, including: 

1 . The calculation of a stressed value-at-risk (SVaR). 

2. The implementation of a new incremental risk change (IRC). 

3. A comprehensive risk measure (CRM) for instruments sensitive to correlations between 
default risks of various instruments. 

In the past, banks used the historical simulation method to calculate the VaR in order to 
find the market risk capital charge. The assumption in the historical simulation method 
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is that percentage changes in market variables the next day are random samples of the 
percentage changes over the previous one to four years. Volatilities of most market variables 
were low in the pre-crisis period (i.e., 2003—2006). As such, market risk VaRs were also low 
during this period and continuing for a time following the start of the financial crisis. To 
remedy the problem of low VaRs, Basel 2.5 required banks to calculate two VaRs, the usual 
VaR, using the historical simulation method, and a stressed VaR, using a 250-day period 
of stressed market conditions. Initially, regulators thought the year 2008 would be ideal for 
stressed market conditions. However, banks are now required to identify a one -year period 
when their actual portfolios performed poorly. This means the stressed period may be 
different across banks. 

The total market risk capital charge is the sum of the usual bank VaR and the stressed VaR. 

The formula for the total capital charge is: 



max(VaR t l , m c x VaR avg ) + max(SVaR t l , m s x SVaR avg ) 



where: 
VaR 



t- l 



VaR 



avg 



m 
SVaR j 
SVaR 



t- 1 



avg 



rn 



= previous day’s VaR, 10-day time horizon, 99% confidence level 
= the average VaR over the past 60 days, 10-day time horizon, 99% confidence 
level 

= multiplicative factor, determined by supervisor, minimum value of three 
= previous day’s stressed VaR, 10-day time horizon, 99% confidence level 
= the average stressed VaR over the past 60 days, 10-day time horizon, 99% 
confidence level 

= stressed VaR multiplicative factor, determined by supervisor, minimum of 
three 



Example: Total market risk capital charge 

Spartan State Bank has calculated a market risk VaR for the previous day equal to 
$15.6 million. The average VaR over the last 60 days is $4.8 million. The bank has 
calculated a stressed VaR for the previous day equal to $ 17-7 million and an average 
stressed VaR equal to $18.4 million. Spartan State Bank has an accurate risk measurement 
model and recorded only two exceptions while backtesting actual losses against the 
calculated VaR. As such, the multiplicative factors, both m c and m g are set to 3. Calculate 
the total market risk capital charge. 

Answer: 

total capital charge = $15.6 million + ($18.4 x 3) = $70.8 million 




Professor’s Note: Because the stressed VaR will be equal to or, more likely, greater 
than, VaR, the capital charge for market risk under Basel 2.5 will be at least 
double the capital charge under Basel II. 
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Incremental Risk Capital Charge 



LO 56.2: Explain the process of calculating the incremental risk capital charge for 
positions held in a banks trading book. 



Prior to the financial crisis, the capital charge for exposures in the banks trading book 
(i.e., bonds, marketable equity securities, commodities, foreign currencies, and most 
derivatives that are held by the bank for the purpose of trading) was generally lower than 
the capital charge for exposures in the banking book (i.e., instruments the bank intends to 
hold for investment purposes including loans and some debt securities). A one-year, 99-9% 
confidence level VaR was required for calculating capital for the banking book while a 
multiplier was applied to a 10-day, 99% VaR for capital to back the trading book. 

The Basel Committee proposed an incremental default risk charge (IDRC) in 2005 to 
correct the problem. The proposal required a 99.9% confidence level, one-year time horizon 
VaR for instruments in the trading book that are sensitive to default risk. This change had 
the affect of requiring roughly the same capital for trading book instruments as banking 
book instruments. However, because much of the 2007—2009 losses in the financial sector 
were due not to defaults but instead to downgrades, widening credit spreads, and losses of 
liquidity, the Basel Committee revised the IDRC to become an incremental risk charge 
(IRC). Instead of instruments sensitive to default, it is now credit-sensitive instruments. 
Banks must consider ratings change sensitivities in addition to default sensitivity. Banks are 
expected to rebalance the portfolio through the year to lessen default risk. 

As part of the IRC calculation, banks are required to estimate a liquidity horizon for each 
instrument in the portfolio. For example, assume an AA-rated bond in the portfolio has 
a liquidity horizon of 6 months. If at the end of 6 months the bond has defaulted or has 
been downgraded, it is assumed that the bank will replace the bond with an AA-rated bond 
comparable to the one held at the start of the period. This rebalancing is assumed at the end 
of each six-month period (or three months, nine months, etc., depending on the est im ated 
liquidity horizon). The Basel Committee set the minimum liquidity horizon at three 
months. 

This assumption of rebalancing to the beginning of the period position is known as the 
constant level of risk assumption. Small losses occur as bonds are downgraded and the 
portfolio is rebalanced, but the likelihood of default is lessened. Generally this assumption 
reduces the one-year, 99.9% VaR. As discussed in the previous topic, the specific risk charge 
(SRC) captures changing credit spreads. 



Comprehensive Risk Measure 



LO 56.3: Describe the comprehensive risk measure (CRM) for positions which are 
sensitive to correlations between default risks. 



The comprehensive risk measure (CRM) is a single capital charge for correlation- 
dependent instruments that replaces the specific risk charge (SRC) and the IRC. The 
measure accounts for risks in the “correlation book.” Instruments that are sensitive to the 
correlation between the default risks of different assets include asset-backed securities (ABS) 
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and collateralized debt obligations (CDOs). In normal periods, there is little risk of loss for 
highly rated tranches of these instruments. However, in times of stress, as in the 2007-2009 
financial crisis, correlations with other instruments increase and even the highest-rated 
tranches can be vulnerable to loss. 

The committee has specified a standardized approach for rated instruments. Due to the 
experience of the financial crisis, resecuritizations, such as CDOs of ABSs, have higher 
capital requirements than normal securitizations such as mortgage-backed securities. 



Figure 1: Standardized Capital Charge for Correlation- Dependent Instruments 



Type of Instrument 


AAA to 

AA- 


A+ to 

A- 


BBB+ to 
BBB 


BB+ to 

BB- 


Below BB — or 

Unrated 


Securitization 


1.6% 


4% 


8% 


28% 


Deduction 


Resecuritization 


3.2% 


8% 


18% 


52% 


Deduction 



For unrated instruments or instruments rated below BB— , the bank must deduct the 
principal amount of the exposure from capital. This is equivalent to a 1 00% capital charge; 
banks must hold dollar-for-dollar capital against the tranche. For unrated tranches banks 
are allowed, with supervisory approval, to use an internal model to calculate the CRM. If 
a bank is allowed to use an internal model, it must routinely perform rigorous stress tests. 
Internal models must be sophisticated and capture the cumulative effects of several factors 
including: 

• Credit spread risk. 

• Multiple defaults. 

• The volatility of implied correlations. 

• The relationship between implied correlations and credit spreads. 

• The costs of rebalancing hedges. 

• The volatility of recovery rates. 

The Dodd-Frank Wall Street Reform and Consumer Protection Act (Dodd-Frank) does not 
allow ratings to be used in setting capital requirements. As such, the United States is trying 
to devise its own CRM rules that do not use ratings. 



Professor’s Note: For unrated and low rated (below BB—) instruments or 
tranches, the deduction of the principal amount of the exposure from capital 
is in essence assigning a 1250% risk weight to the asset class. Think about a 
$1 00 corporate loan that has a 1 00% risk weight. The capital charge is $8, or 

© $100 x 100% x 0.08 (the asset value times the risk weight times the capital 

requirement). If instead you have a $100 unrated ABS CDO , the capital charge 
is $100. Another way to look at it is $100 x 1250% x 0.08. This lets you 
see the difference in the way that these low or unrated correlation dependent 
instruments are treated in terms of capital requirements, compared to traditional 
assets like loans. 
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Basel III Capital Requirements 



LO 56.4: Define in the context of Basel III and calculate where appropriate: 

• Tier 1 capital and its components 

• Tier 2 capital and its components 

• Required Tier 1 equity capital, total Tier 1 capital, and total capital 



Basel III increased capital for credit risk and tightened the definition of capital in response 
to the 2007—2009 financial crisis. The proposals were published in December 2010 and will 
be implemented gradually between 2013 a n d 2019- Basel III eliminated Tier 3 capital. 

Tier 1 capital (or core capital) includes: 

• Common equity including retained earnings (called Tier 1 equity capital or Tier 1 
common capital). 

• Non-cumulative perpetual preferred stock (additional Tier 1 capital, part of total Tier 1 
capital). 

Tier 1 capital does not include: 

• Goodwill. 

• Deferred tax assets. 

• Changes in retained earnings arising from securitized transactions. 

• Changes in retained earnings arising from the banks credit risk, called debit (debt) value 
adjustment (DVA). 

Tier 1 capital is adjusted downward to reflect defined benefit pension plan deficits (but is 
not adjusted upward for surpluses). In addition, there are rules governing capital issued by 
consolidated subsidiaries and also for the inclusion of minority interests. 

Tier 2 capital (or supplementary capital) includes: 

• Debt subordinated to depositors with an original maturity of five years or more. 

• Some preferred stock, such as cumulative perpetual preferred. 

Common equity is known as going-concern capital. It absorbs losses when the bank has 
positive equity (i.e., is a going concern). Tier 2 capital is known as gone-concern capital. 
When the bank has negative capital and is no longer a going concern. Tier 2 capital absorbs 
losses. Depositors are ranked above Tier 2 capital in liquidation so theoretically, as long as 
Tier 2 capital is positive, depositors should be paid in full. 

Capital requirements for each tier and for total capital are: 

• Tier 1 equity capital must be 4.5% of risk-weighted assets at all times. 

• Total Tier 1 capital (i.e., equity capital plus additional Tier 1 capital such as perpetual 
preferred stock) must be 6% of risk-weighted assets at all times. 

• Total capital (Total Tier 1 capital plus Tier 2 capital) must be at least 8% of risk- 
weighted assets at all times. 

By comparison, under Basel I the equity capital requirement was 2% of risk-weighted 
assets and the total Tier 1 capital requirement was 4% of risk-weighted assets. The new 
requirements are significantly more rigorous both because the percentages are higher and 
because the definition of what qualifies as equity capital has been tightened. The 8% 
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total capital requirement is the same as under Basel I and Basel II, but again, the stricter 
definition of equity capital applies under Basel III. 

The timeline for implementation for new capital requirements is shown in Figure 2. 



Figure 2: Implementation Dates for New Capital Requirements 



Regulatory Change 


1 / 1/13 


1 / 1/14 


1 / 1/15 


1 / 1/18 


Tier 1 Equity Capital 


3.5% 


4.0% 


4.5% 


4.5% 


Tier 1 Total Capital 


4.5% 


5.5% 


6.0% 


6.0% 


New Capital Definitions 


Phased in 


Phased in 


Phased in 


New definitions fully in place 



Capital Conservation Buffer and Countercyclical Buffer 



LO 56.5: Describe the motivations for and calculate the capital conservation buffer 
and the countercyclical buffer introduced in Basel III. 



The capital conservation buffer is meant to protect banks in times of financial distress. 
Banks are required to build up a buffer of Tier 1 equity capital equal to 2.5% of risk- 
weighted assets in normal times, which will then be used to cover losses in stress periods. 
This means that in normal times a bank should have a minimum 7% Tier 1 equity capital 
ratio (i.e., 4.5% + 2.5% = 7-0%). Total Tier 1 capital must be 8.5% of risk-weighted assets 
and Tier 1 plus Tier 2 capital must be 10.5% of risk- weighted assets in normal periods. 
Banks need an extra cushion against loss during stress periods. The idea behind the buffer 
is that it is easier for banks to raise equity capital in normal periods than in periods of 
financial stress. The buffer will be phased in between January 1, 2016, and January 1, 2019. 

Dividend payments are constrained when the buffer is wholly or partially used up. For 
example, if a banks Tier 1 equity capital ratio is 6%, the bank must retain a minimum 
of 60% earnings, thus dividends cannot exceed 40% of earnings. See Figure 3 for the 
restrictions on dividend payments as they relate to the capital conservation buffer. 



Figure 3: Dividend Restrictions Resulting from the Capital Conservation Buffer 



Tier 1 Equity Capital Ratio 


Minimum Percentage of Retained Earnings 


4.000% to 5.125% 


100% 


5.125% to 5-750% 


80% 


5.75% to 6.375% 


60% 


6.375% to 7.000% 


40% 


> 7-0% 


0% 
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Professor’s Note: While the buffer requires the ratios to be 7% (Tier 1 equity ), 
8.5% (Total Tier 1 capital ), and 10.5 % (total capital) of risk-weighted assets, 
the ratios are expected to decline in times of market stress due to losses. At that 
point, the ratio requirements described in LO 56.4 are in force (i.e., 4.5%, 

6. 0%, and 8. 0%, respectively). However, once financial markets stabilize, 
banks will face pressure to increase the ratios again. Given the higher equity 
requirements under Basel III, it will likely be difficult for banks to achieve the 
high returns on equity (ROE) that they enjoyed in the 15 years leading up to the 
financial crisis (i.e., 1990 — 2006). 



While left to the discretion of individual country supervisors, Basel III also recommends 
that banks have a capital buffer to protect against the cyclicality of bank earnings, called 
the countercyclical buffer. The countercyclical buffer can range from 0% to 2.5% of risk- 
weighted assets. Like the capital conservation buffer, it must be met with Tier 1 equity 
capital. The buffer will be phased in between January 1, 2016, and January 1, 2019. 

For countries that require the countercyclical buffer, dividend restrictions may apply. See 
Figure 4 for the restrictions on dividend payments as they relate to the countercyclical 
buffer (when set to the maximum 2.5% of risk-weighted assets), keeping in mind that the 
ratios are higher because the capital conservation buffer is also included. In other words. 
Figure 4 is a revised Figure 3, taking the additional buffer into account. 



Figure 4: Dividend Restrictions Resulting from the Capital Conservation Buffer and a 
2.5% Countercyclical Buffer 



Tier 1 Equity Capital Ratio 


Minimum Percentage of Retained Earnings 


4.50% to 5-75% 


100% 


5.75% to 7.00% 


80% 


7.00% to 8.25% 


60% 


8.25% to 9.50% 


40% 


> 9.5% 


0% 



Liquidity Risk Management 



LO 56 . 6 : Describe and calculate ratios intended to improve the management of 
liquidity risk, including the required leverage ratio, the liquidity coverage ratio, and 
the net stable funding ratio. 



In the wake of the 2007—2009 fina n cial crisis, one of the primary goals of Basel III is to 
improve liquidity risk management in financial institutions. Basel III specifies a minimum 
leverage ratio (capital / total exposure) of 3%. As of the 2010 Basel III publication date, the 
type of capital required to calculate the ratio was not decided. Total exposure includes all 
items on the balance sheet, in their entirety (i.e., not risk-weighted). It also includes some 
off-balance sheet items such as loan commitments. 

Banks often finance long-term obligations with short-term funds such as commercial 
paper or repurchase agreements. This is fine during normal economic periods. However, 
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in times of financial stress, this mismatched financing gives rise to liquidity risk. Banks 
find it difficult to roll over the short-term financing when they have, or are perceived to 
have, financial problems. During the 2007—2009 financial crisis, liquidity risk, not a lack 
of capital, was the real problem for many banks (e.g., Lehman Brothers). Basel III requires 
banks to meet the following two liquidity ratios: (1) liquidity coverage ratio and (2) net 
stable funding ratio. 

Liquidity Coverage Ratio (LCR): The LCR focuses on the han k s ability to weather a 30- 
day period of reduced/ disrupted liquidity. The severe stress considered could be a three- 
notch downgrade (e.g., AA to A), a loss of deposits, a complete loss of wholesale funding, 
a devaluation of the value of collateral for funding agreements like repurchase agreements 
(i.e., increased “haircuts”), and potential drawdowns on lines of credit. The ratio is 
computed as: 



high quality liquid assets / net cash outflows in a 30-day period > 100% 



Liquid assets need to be at least as great as potential net cash outflows such that the bank 
can withstand one or more of the pressures described earlier. 

Net Stable Funding Ratio (NSFR): The NSFR focuses on the banks ability to manage 
liquidity over a period of one year. The ratio is computed as: 



amount of stable funding / required amount of stable funding > 100% 



To calculate the numerator, each source of funding (such as retail deposits, repurchase 
agreements, capital, and so on) is multiplied by a factor that reflects the relative stability of 
the funding source. See Figure 5 for the available stable funding (ASF) factors and types of 
funding ava i lable. 

Figure 5: ASF Factors in NSFR 

ASF Factor Category 

1 00% Tier 1 and Tier 2 capital, preferred stock, debt with remaining maturity greater than 

one year. 

90% “Stable” demand and term deposits from individuals and small businesses with 
maturities less than one year. 

80% “Less stable” demand and term deposits from individuals and small businesses with 
maturities less than one year. 

50% Wholesale funding (demand and term deposits) from nonfinancial corporations, 

sovereigns, central banks, multi-lateral development banks, and public sector entities 
with maturities less than one year. 

0% All other liability and equity categories. 
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To calculate the denominator, each required amount of stable funding is multiplied by a 
factor that reflects the relative permanence of the funding required. See Figure 6 for the 
required stable funding (RSF) factors and the types of assets requiring the funding. 



Figure 6: RSF Factors in NSFR 



RSF Factor 


Category 


0% 


Cash and short-term instruments, securities, and loans to financial entities with 
residual maturities of less than one year. 


5% 


Marketable securities with maturities of greater than one year, if claim is on a 
sovereign with 0% risk weight (e.g., U.S. Treasury securities). 


20% 


Corporate bonds with rating of AA— or higher and residual maturity greater than one 
year. Claims on sovereigns or similar bodies with risk-weight of 20%. 


50% 


Gold, equities, bonds rated A+ to A—. 


65% 


Residential mortgages. 


85% 


Loans to small businesses or retail customers with remaining maturities less than one 
year. 


100% 


All other assets. 



Example: Calculating the NSFR 



Bank of the Bluegrass has the following balance sheet: 



Cash (coins and banknotes) 


10 


Retail deposits (less stable) 


100 


Central bank reserves 


10 


Wholesale deposits 


75 


Treasury bonds (> 1 yr) 


10 


Tier 2 capital 


2 


Mortgages 


30 


Tier 1 capital 


18 


Retail loans (< 1 yr) 


30 






Small business loans (< 1 yr) 


90 






Fixed assets 


15 






Total assets 


195 


Total liabilities and equity 


195 



Using the information in Figures 5 and 6 to find the corresponding ASF and RSF factors, 
calculate the bank’s net stable funding ratio. 
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